PHP

SQL escapen

$sql = mysql_real_escape_string (mysqli $handler, string $escapestr)
$sql = mysqli_real_escape_string (mysqli $handler, string $escapestr)