06.05.2016, 05:01
You should basically only escape inputs.
You're better off leaving that function aside. And when you are going to execute a query that has custom inputs in it, use the %q specifier (escapes the string placed in the parameter), instead of the %s specifier.
The %q specifier is built into the native format.
You're better off leaving that function aside. And when you are going to execute a query that has custom inputs in it, use the %q specifier (escapes the string placed in the parameter), instead of the %s specifier.
The %q specifier is built into the native format.