mysql_escape_string

Escapes a string for use in a mysql_query

&mysql.alternative.note.4-3-0;

- `mysqli_escape_string`
- `PDO::quote`

&reftitle.description; `string` `mysql_escape_string` `string` `unescaped_string`

This function will escape the `unescaped_string`, so that it is safe to place it in a `mysql_query`. This function is deprecated.

This function is identical to `mysql_real_escape_string` except that `mysql_real_escape_string` takes a connection handler and escapes the string according to the current character set. `mysql_escape_string` does not take a connection argument and does not respect the current charset setting.

&reftitle.parameters;

`unescaped_string`

- The string that is to be escaped.

&reftitle.returnvalues;

Returns the escaped string.

&reftitle.examples;

### `mysql_escape_string` example

    <?php
    $item = "Zak's Laptop";
    $escaped_item = mysql_escape_string($item);
    printf("Escaped string: %s\n", $escaped_item);
    ?>

&example.outputs;

    Escaped string: Zak\'s Laptop

&reftitle.notes;

`mysql_escape_string` does not escape `%` and `_`.

&reftitle.seealso;

- `mysql_real_escape_string`