Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

mysqli_real_escape_string AND prepared statements?

Should be a simple enough question:

If I am using mysqli prepared statements, do I still need to use mysqli_real_escape_string() as well?

Is this necessary, or a good idea?

Thanks, Nico

like image 382
Nico Burns Avatar asked Jul 22 '09 01:07

Nico Burns


1 Answers

No. If you use prepared statements, escaping is done for you.

like image 131
John Ledbetter Avatar answered Nov 15 '22 14:11

John Ledbetter