What is the significance of using mysql_real_escape_string() to sanitize user input before inserting it into a database in PHP?

When inserting user input into a database in PHP, it is crucial to sanitize the input to prevent SQL injection attacks. Using mysql_real_escape_string() function helps escape special characters in the input, making it safe to insert into the database without risking SQL injection vulnerabilities. 

$user_input = $_POST['user_input'];
$escaped_input = mysql_real_escape_string($user_input);

// Insert the sanitized input into the database
$query = "INSERT INTO table_name (column_name) VALUES ('$escaped_input')";
$result = mysql_query($query);

Keywords

mysql_real_escape_string sanitize user input database PHP

Related Questions