Re: SQL woes (newbie question) - PHP 4.3.6 & ADOdb

Torsten Roehr wrote:

"Gabe" <ydnahg-news4432@mailblocks.com> wrote in message news:20040427194223.85721.qmail@pb1.pair.com...

I seem to be having some trouble getting my SQL statement to work properly. I'm trying to get it so that I can have any text between the single quotes. So as you can see below, if the text that needs to get updated has a single quote in it, I get an error when trying to execute the statement. The database I'm using is Access, the field type is "memo", and I'm using the ADOdb library. In my example below I'm using a really short string. But in actuality it could be *extrememly* long, and would contain HTML code (thus there would be many single quotes and double quotes). Any ideas so that I can get anything between the single quotes to be seen as text to be updated and not something to be processed? I've tried using double quotes and backticks instead of the single quotes around the text. UPDATE tblFAQ_Question SET fldBody = '<span style='color: #000000;'>hi, what's going on?</span>' WHERE autoQuesID = $intQuestionID;

You have got to escape all quotes BEFORE using it in a query. Take a look here: http://de3.php.net/manual/en/function.mysql-real-escape-string.php Regards, Torsten

Thanks! Gabe

Thanks for the link, looks like that will do the trick. But I was also wondering then, when I use a SELECT statement to retrieve the same data and display it, is there a function that will remove all the escape characters? I didn't see anything in the mysql function list.