escaping sql

[eluser]Henry Weismann[/eluser]
Try:

Code:

$where = "(strcmp(soundex(" . $this->db->escape($username) . "), soundex(klang)) = 0) OR username LIKE '%" . $this->db->escape_str($username) . "%'";