What order do i put these as?

[EchoFool]

What order do you put these functions as:

 

mysql_real_escape_string(stripslashes($_POST['letter']));

OR

stripslashes(mysql_real_escape_string($_POST['letter']));

 

I currently have the first method but the ' symbol still crashes my queries...but I want to check that it is the latter first before changing all of them which will take ages..

[DarkWater]

It's the first one if magic_quotes_gpc is on, otherwise you don't use stripslashes() at all.

[EchoFool]

It's the first one if magic_quotes_gpc is on, otherwise you don't use stripslashes() at all.

 

Would it hurt to keep it if they are on encase some how it was turned off or it will cause an error in that situation ?

[DarkWater]

You could do a check:

 

if (get_magic_quotes_gpc()) {
    $var = strip_slashes($var);
}
$var = mysql_real_escape_string($var);