mysql_real_escape_string

Description

This function will escape special characters in the unescaped_string, taking into account the current charset of the connection so that it is safe to place it in a mysql_query().

Example 1. mysql_real_escape_string() example <?php $link = mysql_connect('localhost', 'mysql_user', 'mysql_password'); if (!$link) {     die('Could not connect: ' . mysql_error()); } $item = "Zak's and Derick's Laptop"; $escaped_item = mysql_real_escape_string($item, $link); printf("Escaped string: %s\n", $escaped_item); ?> The above example would produce the following output: Escaped string: Zak\'s and Derick\'s Laptop

See also mysql_escape_string() and mysql_client_encoding().