[ReshiramZekrom]

Hi.

How to prevent Mysql Injection?

I have to use mysql_escape_string() or I can simply do something like this:

PHP код:

format(Query, sizeof(Query), "SELECT * FROM `users` WHERE `Nome` = '%e'", name); 


Thank you for the help