Re: Apostrophes/SQL Statements

On Mon, 15 May 2000, Jan Dvorak wrote: > Andrej Trobentar wrote: > > > > Emile Axelrad wrote: > > > > > I'm getting problems with my SQL Statements where the data has apostrophes > > > [single quotes]. It messes up the insertion procedure - what should I do? > > > How do I get rid of the single quotes from a string? > > > > > > Cheers for your help! I know its an easy question but I can't find the > > > proper thing to do on it... > > > > > > - Emile Axelrad > > > > Maybe this example will help you : > > print '<PARAM NAME="text1" VALUE="' . $ime . > > '">'; > > > > or this one > > $stmt = OCIParse($c,"select * from imenik where PRIIMEK='$priimek'"); > > Wuups!! > > But this will produce an invalid SQL statement > for a person called e.g. O'Neil. You are right! > The cure is simple: > Put a line such as the following before you construct any SQL: > > $priimek = AddSlashes( $priimek ); > > > AnD. > > Jan Thanks for your help Jan! And.