Single Quotes in Form Inputs
| From: | Ben Miller | Date: | Mon, 27 Jul 2009 16:35:02 +0000 |
| Subject: | Single Quotes in Form Inputs | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-295894@lists.php.net to get a copy of this message | ||
Hi,
I have a form in which my sales reps can add new clients into the database,
but I'm running into a problem if the client's name includes a single quote,
such as O'Henry, when it comes time to input the form data into the database
table. I'm guessing I need to use ereg_replace, or something similar, to
change the single quote, but I still can't seem to get the syntax right.
Any help would be appreciated. For what it's worth, here is a shortened
version of what I have:
$ firstName = "$_POST[form_firstName]";
$ lastname = "$_POST[form_lastName]";
$query = mysql_query("INSERT INTO customers (
cust_first,cust_last)
VALUES ('$firstName','$lastName')");
Ben Miller