how do i write mysql_real_escape_string in PHP ODBC

[worldcomingtoanend]

an example is below.  I have tried to google but there seems not to be much on PHP ODBC especially on sql injections.  Will appreciate your help.

 

$username=mysql_real_escape_string($username);

$password=mysql_real_escape_string($password);

 

[ignace]

You can't mysql_real_escape_string is mysql only. Use addslashes instead

[worldcomingtoanend]

You can't mysql_real_escape_string is mysql only. Use addslashes instead

 

so are saying i should do something like this:

 

$username=addslashes($username);

[ignace]

Yes

[KevinM1]

If ODBC's prepared statements work like other db's, use that instead.