On Thu, Dec 20, 2012 at 9:34 AM, Jim Giner <jim.giner@xxxxxxxxxxxxxxxxxx>wrote: > If you are using mysql for a db, then you should already be using > mysql_real_escape_string in place of addslashes. You should not be using mysql_real_escape_string going forward as it will be deprecated in php 5.5.0. http://php.net/manual/en/function.mysql-real-escape-string.php. You should be looking to use either mysqli functions or the PDO class.