PHP 8.6 mysqli::quote_string(): Safer Manual Escaping for MySQL November 10, 2026 php php-internals mysql mysqli security php-86 PHP 8.6 adds mysqli::quote_string(), a single-quote-only escaper modeled on PDO::quote(). See the injection gap it closes and how to migrate safely. Read more →