How to test mysql_real_escape_string()

[wazo]

Hi guys

I want to make sure my site is secure

Is there a way i can test my site using mysql_real_escape_string() to prevent sql injection?

[Wildhoney]

Print out the results of your query.

$szSQL = sprintf("SELECT myColumn1 FROM myTable WHERE myColumn2 = '%s'", mysql_real_escape_string($myData));
var_dump($szSQL);