diff --git a/src/Mysql.php b/src/Mysql.php index 1f7490c..a2877b6 100755 --- a/src/Mysql.php +++ b/src/Mysql.php @@ -131,7 +131,15 @@ private static function sanitizer($input) } else if($type === 'string') { - return htmlspecialchars($input); + $mysqli = new \mysqli( + self::$host, + self::$user, + self::$password, + self::$database, + self::$port, + ); + + return $mysqli->real_escape_string(htmlspecialchars($input)); } }