Been php user. User php. user php все. mysqli_real_escape_string.