Can't run "mysqli_escape_string" with standard Webassist settings

I am trying to use the mysqli_escape_string function to escape a $_POST input. The php manual says this needs a valid mysqli connection to be in place to run.

I have the standard Webassist mysqli statements in place and I can use the Webassist Record set functionality to display records. However the mysqli_escape_string does not run.

Any thoughts ?

<?php require_once('Connections/connXXSQLi.php'); ?>
<?php require_once('webassist/mysqli/rsobj.php'); ?>

$p = (mysqli_escape_string($_POST['searchwords']));

The correct syntax would be:

$p = (mysqli_escape_string($connXXSQLi,$_POST['searchwords']));

Hi Ray, many thanks for your help. All working correctly now.

Cheers, Dave

Hi Ray, should I be using the mysqli_escape_string method to escape all $_GET input before using the data in MySQL queries ? I am unclear if the Webassist built in functions mean that this is not required.

Cheers, Dave

We use the mysqli parameters which are automatically escaped, so you don't need to use that function on passed in values.