note 75929 added to ref.mssql

MSSQL doesn't have a real_escape_string function like MYSQL does, which can lead to error when inserting or updating data that contains a ' (single quote). To prevent this, replace all ' (single quotes) by TWO ' (single quotes) '' which SQL server will interpret as an escaped '. Also you may want to remove any \' \" escape sequences that are translated from any FORM output into the PHP $_POST variables. Hope this helps someone. James ---- Server IP: 64.71.164.2 Probable Submitter: 12.107.178.10 ---- Manual Page -- http://www.php.net/manual/en/ref.mssql.php Edit -- https://master.php.net/note/edit/75929 Del: integrated -- https://master.php.net/note/delete/75929/integrated Del: useless -- https://master.php.net/note/delete/75929/useless Del: bad code -- https://master.php.net/note/delete/75929/bad+code Del: spam -- https://master.php.net/note/delete/75929/spam Del: non-english -- https://master.php.net/note/delete/75929/non-english Del: in docs -- https://master.php.net/note/delete/75929/in+docs Del: other reasons-- https://master.php.net/note/delete/75929 Reject -- https://master.php.net/note/reject/75929 Search -- https://master.php.net/manage/user-notes.php