Basic PHP MySQL to prevent SQL attack injection method

We use the PHP tutorial with the magic quotes to determine whether it is turned on, if it is on the strips tutorial lashes otherwise use the MySQL tutorial _real_escape_string to filter

If the Magic quotes function is enabled

if (GET_MAGIC_QUOTES_GPC ()) {
$name = Stripslashes ($name);
}else{
$name = mysql_real_escape_string ($name);
}

mysql_query ("SELECT * from users WHERE name= ' {$name} '");

Note: The mysql_real_escape_string function will not be valid until the MySQL database tutorial is successfully connected.