what is the best way to escape a Search String from an input field to prevent SQLInjections?
Is there an mysql_real_escape_string method like in PHP or should i manually replace/escape the different characters like: OR, AND, LIKE, WHERE, DELETE, INSERT, UPDATE, FROM, GROUP BY, ORDER BY and so on?
closed with the answer from: @Nick Weaver: