Does doing prep statement + param binding also take care of the need for escaping spec char in var? Or I still need to use mysqli_real_escape_string for that? Don't shot me please. I haven't touched db since ages lol

This post has been edited by FourZeroFour: Mar 10 2015, 10:38 AM