如何使用mysqli_real_escape_string

Question

使用mysqli_real_escape_string的错误在哪里

$ query = sprintf(
  "SELECT id, name, address, lat, lng, ( 3959 * acos( cos( radians(center_lat) ) * cos( radians( lat ) ) * cos( radians( lng ) - radians(center_lng) ) + sin( radians(center_lat) ) * sin( radians( lat ) ) ) ) AS distance FROM markers HAVING distance < radius ORDER BY distance LIMIT 0 , 20",
  mysqli_real_escape_string($ connection, $ center_lat),
  mysqli_real_escape_string($ connection, $ center_lng),
  mysqli_real_escape_string($ connection, $ center_lat),
  mysqli_real_escape_string($ connection, $ radius)
);