solution

Reinventing the wheel and reinventing it the Wrong Way (TM). First of all, there are parametrized queries (available for PHP in MySQLi extension); if that’s not an option, there’s mysql_real_escape_string. This is the main issue – check for already available options before deciding to implement them on your own. Second, you are trying to call … Read more