db_escape_string

• Drupal 4.6
• Drupal 4.7
• Drupal 5
• Drupal 6
• Drupal 7

• View documentation
• List references

Definition

db_escape_string($text)
includes/database.mysqli.inc, line 380

Description

Prepare user input for use in a database query, preventing SQL injection attacks.

Related topics

Name	Description
Database abstraction layer	Allow the use of different database servers using the same code base.

Code

<?php
function db_escape_string($text) {
  global $active_db;
  return mysqli_real_escape_string($active_db, $text);
}
?>