CODEWITHSUNDEEP
phpmysqliprepared-statement
Nico Burns
Nico Burns

Reputation: 17099

mysqli_real_escape_string AND prepared statements?

Should be a simple enough question:

If I am using mysqli prepared statements, do I still need to use mysqli_real_escape_string() as well?

Is this necessary, or a good idea?

Thanks, Nico

Upvotes: 9

Views: 612

Answers (1)

John Ledbetter
John Ledbetter

Reputation: 14183

No. If you use prepared statements, escaping is done for you.

Upvotes: 16

Related Questions