(PHP 4 >= 4.0.3, PHP 5)
mysql_escape_string — Escapes a string for use in a mysql_query
This function was deprecated in PHP 4.3.0, and it and the entire original MySQL extension was removed in PHP 7.0.0. Instead, use either the actively developed MySQLi or PDO_MySQL extensions. See also the MySQL: choosing an API guide and its related FAQ entry for additional information. Alternatives to this function include:
This function will escape the
so that it is safe to place it in a mysql_query().
This function is deprecated.
This function is identical to mysql_real_escape_string() except that mysql_real_escape_string() takes a connection handler and escapes the string according to the current character set. mysql_escape_string() does not take a connection argument and does not respect the current charset setting.
The string that is to be escaped.
Returns the escaped string.
|5.3.0||This function now throws an E_DEPRECATED notice.|
|4.3.0||This function became deprecated, do not use this function. Instead, use mysql_real_escape_string().|
Example #1 mysql_escape_string() example
$item = "Zak's Laptop";
$escaped_item = mysql_escape_string($item);
printf("Escaped string: %s\n", $escaped_item);
The above example will output:
Escaped string: Zak\'s Laptop
mysql_escape_string() does not escape % and _.