title: How to properly escape a string via PHP and mysql
body: <p>Can someone explain what is the difference between using mysql_real_escape_string on a string or wrapping `` around the column. </p>
  
  <p>For example <code>"insert into table (``column``) values ('$string')"</code></p>
  
  <p>or</p>
  
  <pre><code>$escapestring = mysql_real_escape_string($string);
   "insert into table (column) values ('$escapedstring')"
  </code></pre>
  
  <p>What is the difference between these two and what should I use? Thanks.</p>