I'm creating a user profile that updates into a database using JQuery Post and I've just noticed that if I use the word can't in the textarea it uploads to the database as can/'t and reads that back on the profile. My request in the php looks like this:
$name = mysqli_real_escape_string($con, $_REQUEST["name"]);
$location = mysqli_real_escape_string($con, $_REQUEST["location"]);
$about = mysqli_real_escape_string($con, $_REQUEST["about"]);
So is there anything I can add to prevent a slash being added?