Except for a few multi-byte issues, escape string is secure if used correctly (it's not recommended though), which it is here, so there is no injection.My guess is that it's a fake advisory, maybe to get people to visit their blog, or to see which

How can someone bypass mysql escape string? Ask Question Asked 4 years, 8 months ago. Active 4 years, 8 months ago. Viewed 951 times 0. I used mysql escape string in my code. I was taking e-mail addresses and storing them in the database. This is the esc

No, using mysql_real_escape_string is considered to be safe for any input unless the character encoding is not set properly by using mysql_client_encoding. share | improve this answer | follow |