Easy Tutorial
❮ Func Cal Cal Days In Month Func String Sprintf ❯

PHP mysqli_real_escape_string() Function

PHP MySQLi Reference Manual

Escaping special characters in a string:

<?php 
// Assume database username: root, password: 123456, database: tutorialpro 
$con = mysqli_connect("localhost", "root", "123456", "tutorialpro"); 
if (mysqli_connect_errno($con)) 
{ 
    echo "Failed to connect to MySQL: " . mysqli_connect_error(); 
} 

mysqli_query($con, "CREATE TABLE websites2 LIKE websites");

$newname = "tutorialpro";

// Fails to execute without escaping special characters in $newname
mysqli_query($con, "INSERT into websites2 (name) VALUES ('$newname')");

// Escapes special characters
$newpers = mysqli_real_escape_string($con, $newname);

// Inserts after escaping, executes successfully
mysqli_query($con, "INSERT into websites2 (name) VALUES ('$newpers')");

mysqli_close($con);
?>

Definition and Usage

The mysqli_real_escape_string() function escapes special characters in a string for use in an SQL statement.


Syntax

Parameter Description
connection Required. Specifies the MySQL connection to use.
escapestring Required. The string to be escaped. Encoded characters are NUL (ASCII 0), \n, \r, \, ', ", and Control-Z.

Technical Details

Return Value: Returns the escaped string.
PHP Version: 5+
--- ---
❮ Func Cal Cal Days In Month Func String Sprintf ❯