mysqli_real_escape_string

Hi Terry,

Do you mean PHP 5? PHP 6 hasn't been released yet, so any version out there would be very early alpha/beta and not suitable for a production environment.

Also, for compatibility we use mysql_* function not mysqli_* functions. So you can use mysql_real_escape_string() without a connection identifier and it will use the current connection. Eg: mysql_real_escape_string( $record['title'] );

And the CMSB codebase has a shorter function that we often use called mysql_escape() that does the same thing.

Hope that helps!