4 ms·
mysql_real_escape_string is not the right answer. The only way to prevent SQL injection attacks is to use bind variables.
by ecopoesis 13y ago
mysql_real_escape_string is not the right answer. The only way to prevent SQL injection attacks is to use bind variables.