Question

mysql_real_escape_string adds slashes to the values in IN clause and hence no values are returned. How can I send array values that are escaped using mysql_real_escape_string() in IN clause?

Here is my code:

$names_array = array('dave','smith');
$names = mysql_real_escape_string("'". implode("', '", $names_array) ."'");
$sql = "SELECT * FROM user WHERE user_name IN ($names)";
$results = mysql_query($sql);

Query after mysql_real_escape_string changes like this:

SELECT * FROM user WHERE user_name IN (\'dave\', \'smith\')

I don’t want these slashes here in IN clause. Also I don’t want the values directly substituted in IN clause.
Thanks in Advance.

Answer 1

This might do it.

$names = "'". implode("', '", array_map('mysql_real_escape_string', $names_array)). "'";