RE: [PHP-DB] How can this be done?

you need to use the addslashes() command which will escape the quote mark for you, so something like $query="insert into trivia (trivia) values ('" . addslashes($line) . "')"; however, you will find that on a machine which is configured with magic_quotes_gpc turned on, you will end up with something like "The average person\'s left hand does 56% of the typing." coming back out of your database, because it will actually insert "The average person\\'s left hand does 56% of the typing." (i *think*) so, what i have found is the best thing to do from a portability viewpoint is write a function something along the lines of (obviously pseudo-code) function check_quotes( $string ) { if magic quotes are turned off // there is a variabel you can check for this... return $string; else return addslashes($string); } then rather than using $query="insert into trivia (trivia) values ('" . addslashes($line) . "')"; and risk having things doubleshashed, you can use $query="insert into trivia (trivia) values ('" . check_quotes($line) . "')"; and it will turn out properly whether magic_quotes_gpc is turned on or off ok, enough of me going on and on good luck and have fun may the php be with you :) // -----Original Message----- // From: Subodh Gupta [mailto:subodhkgupta@satyam.net.in] // Sent: Friday, 27 April 2001 2:44 PM // To: PHP DB; PHP Gen // Subject: [PHP-DB] How can this be done? // // // Hi All, // // I created a table using the create command. // // create table trivia // ( // entry_id integer not null auto_increment, // trivia text null // ); // // Now I have a fle tvia.txt, the content of which are as follows: // // The average person's left hand does 56% of the typing. // The longest one-syllable word in the English language is "screeched". // All of the clocks in the movie "Pulp Fiction" are stuck on 4:20. // No word in the English language rhymes with month, orange, // silver, or purple. // // I want to insert each line of the file in a new row in the table. // // I wrote the following code for it. // // <?php // include "db.php"; // dbconnect("guestbook2k"); // $fcontents=file("tvia.txt"); // while (list ($line_num, $line) = each ($fcontents)) { // $query="insert into trivia (trivia) values ('$line')"; // $result = mysql_query($query) // or die("Query failed: " // ."<li>errorno=".mysql_errno() // ."<li>error=".mysql_error() // ."<li>query=".$query // ); // echo "<b>Line $line_num:</b> ". $line . "<br>\n"; // } // ?> // // I got the following error. // Query failed: // errorno=1064 // error=You have an error in your SQL syntax near 's left hand // does 56% of the typing. ')' at line 1 // query=insert into trivia (trivia) values ('The average person's // left hand does 56% of the typing. ') // // Now I know that I got the error because there was ( ' ) in the // first line. So how do I prevent this. Or in other words insert into // the table text containing // ( ' ) and ( " ) or for that matter any metacharacter. // // Thank You in Advance. // // Subodh Gupta // I have learned, Joy is not in things, it is in us. // You will ultimately be known by what you give and not what you get. // // // // -- // PHP Database Mailing List (http://www.php.net/) // To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net // For additional commands, e-mail: php-db-help@lists.php.net // To contact the list administrators, e-mail: php-list-admin@lists.php.net //