Is mysql_real_escape_string() with sprintf needed only at login page or at every mysql_query after login, for preventing SQL injection?
Is mysql_real_escape_string() with sprintf needed only at login page or at every mysql_query after
Share
You should use mysql_real_escape_string for any user supplied data that is going to be ran through an SQL query.