This may Why Hackers hate the MySQL function mysql_real_escape_string() · HackerTrans