title: mysql_real_escape_string VS addslashes
body: <p>Can someone shed some light on the differences between these 2 functions, from the PHP manual:</p>
  <p><code>addslashes</code>:
  Returns a string with backslashes before characters that need to be quoted in database queries etc. These characters are single quote ('), double quote (&quot;), backslash () and NUL (the NULL byte).</p>
  <p><code>mysql_real_escape_string</code>:
  <code>mysql_real_escape_string()</code> calls MySQL's library function <code>mysql_real_escape_string</code>, which prepends backslashes to the following characters: \x00, \n, \r, , ', &quot; and \x1a.</p>
  <p>From what I gather the major difference is \x00, \n \r \x1a which <code>addslashes</code> doesn't escape, can you tell me what the significance of that is?</p>