I feel daft asking this, but it's driving me potty. How can I make this string:
Children\''s Toy Suitable for insert to a MySQL database and escape the characters properly?
Thanks
Add a comment |
3 Answers
mysql_real_escape_string should do it. If you are using the mysqli extension, you can do it the same way. ( mysqli_real_escape_string )
1 Comment
Jenski
This led me to the solution. I was using the following: if (get_magic_quotes_gpc()) { $value = stripslashes($value); }$return_value = "'" . str_replace("'", "''", $value) . "'"; but i had to call stripslashes() before i even used this bit of code and that solved my problem... the Notes on the link you supplied helped. Thanks
Like this:
Children\\\'\'s Toy But you really should be relying on something built into PHP like mysql_reql_escape_string() or better yet, parameterize queries using PDO.
Here's my test of the above:
mysql> select 'Children\\\'\'s Toy' as escapedString; +------------------+ | escapedString | +------------------+ | Children\''s Toy | +------------------+ 1 row in set (0.49 sec) 