Question

I have just implemented mysql_real_escape_string() and now my script won’t write to the DB. Everything worked fine before adding mysql_real_escape_string():

Any ideas??

$name = mysql_real_escape_string($_POST['name']);
$description = mysql_real_escape_string($_POST['description']);
$custid = mysql_real_escape_string($_SESSION['customerid']);

mysql_send("INSERT INTO list 
              SET id = '',  
                  name = '$name', 
                  description = '$description', 
                  custid = '$custid' ");

Answer 1

what is that mysql_send function?
what if to change it to mysql_query();