I'm using [this](https://stackoverflow.com/questions/574805/how-to-escape-strings-in-sql-server-using-php) question as a reference. My issue is that it's encoding my string to hex, but not decoding it once it's written to the database.

HTML textarea

```
<textarea class="form-control" rows="5" name="nomInfo[]" id="appNom" placeholder="Additional Information"></textarea>

```

Getting POST value and inserting into the DB

```
function mssql_escape($data) {
    if(is_numeric($data))
        return $data;
    $unpacked = unpack('H*hex', $data);
    return '0x' . $unpacked['hex'];
}   

$nomInfo = $_POST['nomInfo'][0];

$nomInfoDecode = mssql_escape($nomInfo);

$query = "INSERT INTO dbo.emp_recog (nomInfo) VALUES (";
$query .= "'" . $nomInfoDecode . "');";

```

So for example, if I types in `ggfdgdfg/fdg.fdgdf.gdf "fdskfdskfds;fsd ' sdfds' fds/f%` into the textarea and submit the form, this is written to the database `0x67676664676466672f6664672e66646764662e676466205c226664736b6664736b6664733b667364205c272073646664735c27206664732f6625`