when inserting data... PHP+MySQL

[sinus_]

hi,

what do u do when you insert data into the databse?
do you do htmlentities() or addslashes() or something else?

what do u recommend i do?

thanks :P

[petefs]

function quote_smart($value) {
$value = trim($value);
// Stripslashes
if (get_magic_quotes_gpc()) {
$value = stripslashes($value);
}
// Quote if not integer
if (!is_numeric($value)) {
$value = "'" . mysql_real_escape_string($value) . "'";
}
return $value;
}

[johnlouis]

ah done. thanks. found the same code in php.net using mysql_real_escape_string()
works perfectly for me :D ty petefs :D

[sinus_]

^ the post above is mine :)