Should be a simple enough question:

If I am using mysqli prepared statements, do I still need to use mysqli_real_escape_string() as well?

Is this necessary, or a good idea?

Thanks, Nico

Edit
Report