Re: problem with ' or "

[Jasper Bryant-Greene <jasper@xxxxxxxxxxxxxxxxxx>]

George B wrote:
> Jasper Bryant-Greene wrote:
>
> > George B wrote:
> >
> > > I made a script that posts data into a database but it has a problem 
> > > whenever I enter a ' or a ". How do I bypass this problem?
> >
> > If it is MySQL, use mysql_real_escape_string() [1]. If any other 
> > database, have a look in the PHP manual [2] for the relevant function, 
> > or as a last resort use addslashes().
> >
> > Jasper
> >
> > [1] http://www.php.net/mysql_real_escape_string
> > [2] http://www.php.net/docs.php
>
> Where do I put the code in?

Example:

$value = mysql_real_escape_string($_POST['value']);
$results = mysql_query("SELECT * FROM sometable WHERE field='$value'");

Jasper

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php