Prior to doing an INSERT, do you MySQL real escape data before JSON encoding it, or after JSON encoding?
255
How can I prevent SQL injection in PHP?
74406
SQL injection that gets around mysql_real_escape_string()
107307
Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?
133157
mysql varbinary vs varchar
109617
Python MySQLdb string substitution without added quotations
142088
Order of condition execution in MySQL
154275
Change MySQL default character set to UTF-8 in my.cnf?
60166
exporting a table in MySQL with columns that have newline characters
155612
Single vs double quotes in JSON
95323
Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
11160
How can I force PHP's json_encode integer values to be encoded as String?
16324
How does a PreparedStatement avoid or prevent SQL injection?
125331
How to detect UTF-8 characters in a Latin1 encoded column - MySQL
139754
How do I escape a single quote in SQL Server?
80890
Best data type for storing currency values in a MySQL database
63087
What's the difference between VARCHAR(255) and TINYTEXT string types in MySQL?
149657
Alternative to mysql_real_escape_string without connecting to DB