What is the different between mysql_escape_string() and addslashes() ?

[kaisellgren]

Hi,

Can someone please tell me the difference between mysql_escape_string() and addslashes() ?

PHP doc just said they both escape some special chars like quotes...

[Fumigator]

One is a mysql C api function, the other is a php function. BTW you'll want to use mysql_real_escape_string() rather than the depreciated mysql_escape_string().

[kaisellgren]

But should I use addslashes or mysql_real_escape_string ?

[Kid Charming]

mysql_real_escape_string()