Re: magic_quotes

[Christoph 'knurd' Jeschke <christoph.jeschke () gmail com>]

Steve Hillier schrieb:

> You should be using mysql_escape_string() to sanitise your input
> strings if you're going to be using them as-is inside SQL statements.

Better use Stored Procedures (MySQL5) and mysql_real_escape_string
instead of mysql_escape_string.