If the user enters data with an apostrophe into a text box, and you attempt to build and SQL string to execute, you get something like this in your string:<BR><BR><B>INSERT INTO MyTable ...

SQL injection allows an attacker to rewrite ... proper handling is important in preventing attacks. pg_escape_string method to sanitize user input into a safe form. pg_escape_string internally ...