Which one? str_replace() mysql_real_escape_string()

[SharkBait]

What is the difference between:

[code=php:0]
str_replace("'", "\'", $mystring);
[/code]
and
[code=php:0]
mysql_real_escape_string($mystring);
[/code]

??

[wildteen88]

mysql_real_escape_sting escapes other characters, such as whitespace, quotes, hex, slashes (\x00, \n, \r, \, ', " and \x1a)

Where as your code just escapes single quotes.