Re: Terrible-PHP and Postgres

I believe you would want to do this to $fname: $fname = AddSlashes($fname); That should encode things correctly for the insert. You can read what the manual has to say about AddSlashes at: http://www.zend.com/manual/function.addslashes.php Hope that helps you out. :) -Josh Hoover jhoover@mac.com > It's terrible, > I have many lines like > > $conn = pg_connect("host=$host port=$port dbname=$database user=$user"); > $sql_item = "insert into carts_cust > values($cartID,'$fname','$lname','$company')"; > $result = pg_exec($conn,$sql_item); > > Seems all right > > But the problem discovered is when there is a ' in a variable. > Example > $fname = coco' > > How is possible solve this problem ? > Thanks > Enrico >