what is ... mysql_real_escape_string? dangerous?
<blockquote>
  <p><strong>Possible Duplicate:</strong><br>
  <a href="http://stackoverflow.com/questions/12859942/why-shouldnt-i-use-mysql-functions-in-php">Why shouldn’t I use mysql_* functions in PHP?</a>  </p>
</blockquote>



<p>hye, Can i use a code in php like this:</p>

<pre><code>$s_username = addslashes(strip_tags($_POST['username'])); 
$s_password = addslashes(strip_tags($_POST['password']));
</code></pre>

<p>before this is use this</p>

<pre><code>$email = mysql_real_escape_string(strip_tags($_POST['email']));
$username = mysql_real_escape_string(strip_tags($_POST['username']));
</code></pre>

<p>...because many said that mysql_real_escape_string is dangerous to use? </p>
