handling ' with mysql/php insert and select
| From: | Adam Williams | Date: | Thu, 03 Jan 2008 19:22:09 +0000 |
| Subject: | handling ' with mysql/php insert and select | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-266581@lists.php.net to get a copy of this message | ||
In my form, I am parsing all the text inputs through mysql_real_escape_string() before inserting the data. however, when I look at the SQL query in PHP, when I type the word blah's to my text box variable, and then insert it into mysql after being ran through mysql_real_escape_string(), it does:
insert into contract (contract_id, responsibility) VALUES (15, 'blah\\\'s')
and when I query the in mysql/PHP it shows:
select responsibility from contract where contract_id = 15;
+----------------+
| responsibility |
+----------------+
| blah\'s |+----------------+ 1 row in set (0.00 sec) and when I run that select statement in PHP it prints blah\'s on the screen. I want it to print back blah's without the \. So what are my options? run every variable through stripslashes(); before printing them to the screen?