Okay, I'm stupid... Why should I add an extra '\' to these characters?
Example: \n are not a threat for my query, is it?
And question 2:
On my question wheter I'll be secure from SQL Injection attacks feyd answered:
But how does I make the user input secure then? Is it really enough to add them to a variable and then place two 's (i.e. '$input') around it?I never said nor implied that. It's not true. It's the opposite.
Sorry for my low learning ability in this difficult subject...