PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!
No sorry, there is no text field called, about_me. I am just giving about_me a value of "?" so that it will be inserted into the database (it will be used later on) But just incase someone tries to mess around with my code i want to add mysql_real_escape_string infront of it
oo7ml wrote:No sorry, there is no text field called, about_me. I am just giving about_me a value of "?" so that it will be inserted into the database (it will be used later on) But just incase someone tries to mess around with my code i want to add mysql_real_escape_string infront of it
You are aware that you only have to escape data that you don't have absolute control over, right? And you should only escape it right before putting it into the database. Relying on it being previously escaped is not good practice.