views:

101

answers:

1

Should be a simple enough question:

If I am using mysqli prepared statements, do I still need to use mysqli_real_escape_string() as well?

Is this necessary, or a good idea?

Thanks, Nico

+7  A: 

No. If you use prepared statements, escaping is done for you.

John Ledbetter