Why using real_escape_string wouldn't help fixing sqli? Could you provide some examples?
I know prepared statements are the way to go but proper escaping, even if tedious, seams to be OK for me.
I know prepared statements are the way to go but proper escaping, even if tedious, seams to be OK for me.