Ver original$query = mysqli_query($conex, sprintf("SELECT * FROM tabla WHERE campo = '%s'", mysqli_real_escape_string($conex, $variable));