|
|||||||||
|
|||||||||
|
|||||||||
| |
|||
 |
|
|
|
|
|||||||||
|
|||||||||
|
|||||||||
| |
|||
|
|
|
|
| |||||||||
 |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Display Modes |
Dev Articles Community Forums Sponsor:
|
|
|
|
#1
August 6th, 2006, 10:11 PM
|
|||
|
|||
|
No ' allowed in MySQL
I am new at MySQL, PHP, and Apache. I have written a comments section on my page and use an INSERT statement to send the comment to a table. Everything works perfectly EXCEPT it will not accept a single quote ('). All other characters are accepted.
The comment field is TEXT.
|
|
#2
August 7th, 2006, 12:47 AM
|
||||||
|
||||||
|
You're probably using single quotes in your mysql query.
Try parsing the comments with addslashes() before you post them to the database, that will escape all `dangerous' characters.
__________________
This is my code. Is it not nifty? "The biggest problem encountered while trying to design a system that was completely foolproof, was, that people tended to underestimate the ingenuity of complete fools." ---Douglas Adams Join the Itsacon fanclub! Zero Tolerance: Spammers banned so far: 275
 
|
|
#5
March 27th, 2007, 12:12 AM
|
|||
|
|||
|
Quote:
You need to escape out a single quote character (') and ensure that it becomes a pair of single quotes ('') before trying to put it into a SQL statement. In PHP, the easy way is just run your string through the mysql_real_escape_string() function before the code that tries to put it into the database. See... http://us3.php.net/manual/en/function.mysql-real-escape-string.php
|
|
| Viewing: Dev Articles Community Forums > Databases > MySQL Development > No ' allowed in MySQL |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
 |
|
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
