title: When to use mysqli_real_escape_string?
body: <blockquote>
    <p><strong>Possible Duplicate:</strong><br>
    <a href="https://stackoverflow.com/questions/60174/best-way-to-prevent-sql-injection-in-php">Best way to prevent SQL Injection in PHP</a>  </p>
  </blockquote>
  
  
  
  <p>I am wondering about sql injection and want to know when to use mysqli_real_escape_string.</p>
  
  <p>Do I need to use it every time I have a WHERE clause in my query?</p>