I\'m looking for the alternative of mysql_real_escape_string() for SQL Server. Is addslashes() my best option or there is another alternative funct
mysql_real_escape_string()
addslashes()
I have been using this as an alternative of mysql_real_escape_string():
function htmlsan($htmlsanitize){ return $htmlsanitize = htmlspecialchars($htmlsanitize, ENT_QUOTES, 'UTF-8'); } $data = "Whatever the value's is"; $data = stripslashes(htmlsan($data));