Please do NOT use addslashes. Replace it with this: http://php.net/mysql_real_escape_string It is CRUCIAL if your database might maybe ever consider going international and having charset other than ISO-8856-1 or Latin1 [or the MySQL default of Monty's native language, which is very very very close to Latin1, but not quite] Even if you know you'll never ever need a different charset, it's just "best practice" to use the DB-supplied escape function, rather than Rasmus' quick (and very needed) nineteen-ninety-mumble hack. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php