I'm pretty sure that, in order to use mysql_real_escape_string() you must have magic quotes off or use stripslashes first... the same as addslashes, so it should work if you just search and replace. Don't quote me on that though On 5/12/05, Richard Lynch <ceo@xxxxxxxxx> wrote: > On Wed, May 11, 2005 8:27 pm, James Williams said: > > On 5/11/05, Richard Lynch <ceo@xxxxxxxxx> wrote: > >> Is mysql_real_escape_string *DIFFERENT* in some incredibly huge secure > >> way > >> that I want to stop working on all my current projects to go re-write > >> the > >> 10,000,000 lines of code? > > > > 2 words: Search & Replace. > > 2 words: Magic Quotes > > -- > Like Music? > http://l-i-e.com/artists.htm > > -- jamwil.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php