[SOLVED] how to use this function

[b2k]

Hi,

 

I found this function for prevent SQL injection. But I don't know how to use it

 

<?php
function sql_sanitize( $sCode ) {
if ( function_exists( "mysql_real_escape_string" ) ) {		// If PHP version > 4.3.0
	$sCode = mysql_real_escape_string( $sCode );		// Escape the MySQL string.
} else { // If PHP version < 4.3.0
	$sCode = addslashes( $sCode );				// Precede sensitive characters with a backslash \
}
return $sCode;							// Return the sanitized code
}
?>

 

Here are my vars:

 

$name=$_POST['name'];
$email=$_POST['email'];

 

thanks

[craygo]

<?php
function sql_sanitize( $sCode ) {
if ( function_exists( "mysql_real_escape_string" ) ) {		// If PHP version > 4.3.0
	$sCode = mysql_real_escape_string( $sCode );		// Escape the MySQL string.
} else { // If PHP version < 4.3.0
	$sCode = addslashes( $sCode );				// Precede sensitive characters with a backslash \
}
return $sCode;							// Return the sanitized code
}

$name = sql_sanitize($_POST['name']);
$email = sql_sanitize($_POST['email']);
?>

 

Ray

[b2k]

Thx

 

Was easy...I'm learning