title: Why not backslash every empty space to prevent mysql injections
body: <p>I've been wondering this for maybe a few months now but I still don't know an answer, other then possible speed performance. So long story short, instead of having all this PDO codes everywhere, why not just put a backslash between every character?</p>
  
  <pre><code>$String = $_POST["attack"];   // SOME THING' OR 1 = 1 --
  $String = fFilter( $String ); // \S\O\M\E\ \T\H\I\N\G\'\ \O\R\ \1\ \=\ \1\ \-\-
  </code></pre>
  
  <p>Now I haven't been into this SQL stuff in awhile, so I can't give a perfect example, but basically the sql string should look like this <code>SELECT * FROM account WHERE id = '\S\O\M\E\ \T\H\I\N\G\'\ \O\R\ \1\ \=\ \1\ \-\-'</code> and something like that just always seemed pretty safe, but I haven't heard of anyone using it, or even why not to use it. I always see things like filtering html and etc isn't good, but I don't see why not just filter every single character. Since any attack would look like <code>\a\t\t\a\c\k</code>.</p>