[SOLVED] stripslashes() vs mysql_real_escape_string()

[alexweber15]

im sorry admins, not sure if this is the appropriate board if not please move it.

 

basically, as far as cleaning data for mysql insertion, ive read that these 2 functions are important and also that you should undo magic_quotes_gpc() if its available and implement mysql_real_escape_string() instead.... so far so good!

 

but where does stripslashes() come into play?

 

thanks!

 

-Alex

[CroNiX]

You use stripslashes if your test for magic_quotes_gpc() is true to undo the magic quotes.  Then use mysql_real_escape_string().

something like:

<?php
function escapeString($string, $dblink)
{
    if(get_magic_quotes_gpc() == 1)
    {
        $string=stripslashes($string);
    }
    return mysql_real_escape_string($string, $dblink);
}

[alexweber15]

thanks!