db_escape_string
Definition
db_escape_string($text)
drupal/includes/database.mysqli.inc, line 334
Description
Prepare user input for use in a database query, preventing SQL injection attacks.
Related topics
Name | Description |
|---|---|
| Database abstraction layer | Allow the use of different database servers using the same code base. |
Code
function db_escape_string($text) {
global $active_db;
return mysqli_real_escape_string($active_db, $text);
}