Real escape, using mysqli_real_escape_string() or mysql_real_escape_string().

• mysqli_real_escape_string()
• mysql_real_escape_string()

$string string Required

String to escape.

string Escaped string.

File: wp-includes/class-wpdb.php. View all references

public function _real_escape( $string ) {
	if ( ! is_scalar( $string ) ) {
		return '';
	}

	if ( $this->dbh ) {
		if ( $this->use_mysqli ) {
			$escaped = mysqli_real_escape_string( $this->dbh, $string );
		} else {
			$escaped = mysql_real_escape_string( $string, $this->dbh );
		}
	} else {
		$class = get_class( $this );

		wp_load_translations_early();
		/* translators: %s: Database access abstraction class, usually wpdb or a class extending wpdb. */
		_doing_it_wrong( $class, sprintf( __( '%s must set a database connection for use with escaping.' ), $class ), '3.6.0' );

		$escaped = addslashes( $string );
	}

	return $this->add_placeholder_escape( $escaped );
}