In my database connection include I use the code
foreach ($_POST as $key => $value) {
$_POST[$key] = mysql_real_escape_string($value);
}
foreach ($_GET as $key => $value) {
$_GET[$key] = mysql_real_escape_string($value);
}
This runs fine on my linux testing server (Cent OS 5.5) however, when it is transferred to the production environment (Windows Server 2003, IIS6 :( ) it blocks some SQL queries. Wondered if anyone else had run in to the same problem and knew of a solution. Cheers