Why using real_escape_string wouldn&#x27;t help fixing sqli? Could you provide some examples?<p>I know prepared statements are the way to go but proper escaping, even if tedious, seams to be OK for me.