Off-Topic Discussions

Not in GD because it would maybe be moved to here so it's safer this way.

what does this

mysql_real_escape_string

do exactly? Thanks in advance

It adds a backslash to special characters to properly escape them in your SQL queries.

This command is depreciated and should not be used and instead use the API from MySQLi or MySQL PDO.