Re: insert a special character

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



You need to go:

addSlashes($strexp) on the string before inserting it.

This will replace all 's and "s with \' and \"

You open up a massive security hole in your database if you're not
addSlashing every value that goes in...

Chris


> -----Original Message-----
> From: pgsql-php-owner@xxxxxxxxxxxxxx
> [mailto:pgsql-php-owner@xxxxxxxxxxxxxx]On Behalf Of arun kv
> Sent: Thursday, 28 March 2002 1:19 PM
> To: PGSQL
> Subject: [PHP] insert a special character
>
>
> hello,
>        I have a string with ' this symbol in the middle of  the text
>      example:-
>              " that book belong to rahul's sister"
>
>     this string is to be stored in the variable "$strexp"
>     when I am inserting this variable in database table
>     following error apperes
>
>
>    " parse error at or near "s" "
>
>     How can I read the string and store in a variable and insert the same
> into the database table ?
>
> thanks in advance ,
> with regards,
> Arun
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@xxxxxxxxxxxxxx)
>



[Index of Archives]     [Postgresql General]     [Postgresql Admin]     [PHP Users]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Databases]     [Yosemite Backpacking]     [Postgresql Jobs]

  Powered by Linux