> I agree. Personally, I would go with the prepared statements available > with mysqli than the string escaping available with mysql.
Yes, absolutely agree, using prepared statements is the best and recommended way. While at it making recommendations, I might also recommend MDB2 rather than mysqli, though either should work. /R _______________________________________________ LinuxUsers mailing list LinuxUsers@socallinux.org http://socallinux.org/cgi-bin/mailman/listinfo/linuxusers