quick q - mysql_real_escape_string

[pyro13]

http://uk.php.net/mysql_real_escape_string

using the above mysql_real_escape_string, to append backslashes.... if i am using an insert query should this save, for example:

"' OR ''='"

as

\"\' OR \'\'=\'\"

to my sql database?

• the reason i ask is because it saves it 'as is' (without slashes), although i know my processing of the above function is correct as i can echo output with slashes

[pyro13]

ok im confused:

function quote_smart($value)
{
   // Stripslashes
   if (get_magic_quotes_gpc()) {
       $value = stripslashes($value);
   }
   // Quote if not integer
   if (!is_numeric($value)) {
       $value = "'" . mysql_real_escape_string($value) . "'";
   }
   return $value;
}

my text submitted through this function will be displayed with backslashes if i echo it, although not if i save it to a database? the stripslashes($value); seems uneccessary and removes all my slashes? completley reversing the intent of this function?

[pyro13]

ok so....

its stripping the slashes from all post data.

then if it is not an integer it is surrounding it with '' tags, and backslashing where relevant.

now i dont understand why it doesnt write to the database in this format? surrounded with '' tags, and slashes?