25.2.3.16. mysql_escape_string()
You should use mysql_real_escape_string()
instead!
This function is identical to
mysql_real_escape_string() except that
mysql_real_escape_string() takes a
connection handler as its first argument and escapes the
string according to the current character set.
mysql_escape_string() does not take a
connection argument and does not respect the current character
set.
