Should be a simple enough question:
If I am using mysqli prepared statements, do I still need to use mysqli_real_escape_string()
as well?
Is this necessary, or a good idea?
Thanks, Nico
No. If you use prepared statements, escaping is done for you.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With