mysql_real_escape_string with PDO PHP

Question

Hello i am new to PDO so getting confused and getting errors ;) with mysql_real_escape_string ..

can any one help, here is my code

if(!empty($_POST)         


        

Answer 1

With prepared statements you don't have to escape your variables. The driver will do it for you automatically, depending on the database you are using underneath. Actually you mustn't escape it yourself, since this will double escape it.

Answer 2

mysql_real_escape_string requires an active mysql connection made through a mysql_connect call previously... So yes, it won't work.

PDO does that automatically for you anyway

Answer 3

Yes, PDO automatically escapes your data, so you don't need to use mysql_real_escape_string. See here, for example.