I'm working with someone else's database connection PHP function that works fine as long as I pass it at least three arguments. If I pass it two argument, then the apache log says:

`mysql_real_escape_string() expects parameter 2 to be resource, null given`

I need the function to take a SQL query like so:

`$sql = DatabaseManager::prepare("SELECT * FROM sometable WHERE somevar = %d", $var);` 

and prepare it for safe execution. Can someone help make it accept two arguments?

```
public static function prepare($query = null) { // ( $query, *$args )

    $args = func_get_args();

    array_shift($args);

    // If args were passed as an array (as in vsprintf), move them up
    if ( isset($args[0]) && is_array($args[0]) ){
        $args = $args[0];
    }

    $query = str_replace("'%s'", '%s', $query); // in case someone mistakenly already singlequoted it
    $query = str_replace('"%s"', '%s', $query); // doublequote unquoting
    $query = str_replace('%s', "'%s'", $query); // quote the strings

    for($i=0; $i<count($args); $i++){
        $args[$i] = mysql_real_escape_string($args[$i], self::$currentCon);
    }

    //array_walk($args, array(&$this, 'mysql_real_escape_string'));

    return @vsprintf($query, $args);
}   

```

Thanks a ton!

**EDIT**

As deceze points out, this is about `self::$currentCon)` and means that a database connection is coming back `null`

I've tried this multiple times. Still curious about why this works:

```
$sql = DatabaseManager::prepare("SELECT * FROM sometable WHERE id = ".$somevar); 

```

but this fails:

```
$sql = DatabaseManager::prepare("SELECT * FROM sometable WHERE somevar = %d", $var); 

```

How would that affect `self::$currentCon)`?