title: Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security?
body: <p>Will mysql_real_rescape_string() be enough to protect me from hackers and SQL attacks? Asking because I heard that these don't help against all attack vectors? Looking for the advice of experts.</p>
  
  <p>EDIT: Also, what about LIKE SQL attacks?</p>