Enfocus Community

So I am not a php dev, but if you're trying to prevent SQL injection the best practice is to utilize prepared, or parameterized, statements. No need to sanitize inputs for SQL injection. If you're sanitizing SQL escape characters from inputs, you're probably doing it wrong. Also, the mysql_* functio...