Re: ' giving problem while inserting in table.

From: Date: Fri, 12 Jul 2002 14:49:58 +0000
Subject: Re: ' giving problem while inserting in table.
Groups: php.general 
Request: Send a blank email to php-general+get-107378@lists.php.net to get a copy of this message
Use addslashes() on ALL strings before inserting them into your database. Then, on your frontend, extract the data and use stripslashes() on all strings. Hope to help! Martin Clifford Homepage: http://www.completesource.net Developer's Forums: http://www.completesource.net/forums/ >>> "Anil Garg" <anilg@niksun.com> 07/12/02 10:45AM >>> Hi, I am making a faq maintenance system using mysql and php. To insert a entry in to a faq table i am using the following query: --------- INSERT INTO faq_table_netvd (id,question, answer,netvcr,netdetector,add_date,mod_date,keyword,category,display,attach_ id) VALUES ('0','$frm[question]', '$frm[answer]','$frm[netvcr]','$frm[netdetector]','$frm[add_date]','$frm[mod _date]','$frm[keyword]','$frm[category]','$frm[display]','$frm[attach_id]') "); ----------- now the problem is when $frm[question] has some string like: "why i can't eat". i get the following error: MySQL Error: You have an error in your SQL syntax near 't eat?' ,answer = 'Please recheck the power of your specs:)' ' at line 3.Putting a '\' before ' (e.g. \')solves my problem...but when i open the same quesion to edit it, again i have to put backslashes where ever i find " ' " in the quesion or answer. Can anyone please suggest a solution to this. thanx and regards anil [please ask if i havent explained the problem fully] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

« previous php.general (#107378) next »