I believe mysqli_real_escape_string () also handles different character sets better; if you have not run into character set matching issues with your DB yet, you will eventually, so it's nice to ...

All these mysqli_real_escape_string and half-functioning sanitizers are what drives me nuts in PHP, but I have found peace with PDO, you should try it, especially if you are refreshing your OOP ...