mysql真正的转义字符串如何使用它[重复]

Question

This question already has an answer here:

• how do I use mysql real escape string? 3 answers
• How can I prevent SQL injection in PHP? 28 answers

how would i add mysql_real_escape_string() function to the $password_md5 and $username ? help would be appreciated

$query="UPDATE `users` SET `password` = '$password_md5' WHERE `username` = '$username'";

can some body give me the script for that please i forgot how to to it. a example would really help me out

</div>

Answer 1

$query="UPDATE users SET password = '".mysql_real_escape_string($password_md5)."' WHERE username = '".mysql_real_escape_string($username)."'";