single quote problem

Anon

Have the following code snippit:

while ($data=mysql_fetch_array($result)) {
// include code to display results as you see fit
print ($data[0]); print " <a href='book.php?title=";
print ($data[1]); print "'>";print ($data[1]);
print "</A><BR>";

my problem is that some of my data[1] values have aposterphes(sp)(ie single quotes) in them. That effectively ends the link. The links also have spaces in them so I need to enclose them somehow. Any suggestions on how to mage these?

Thanks

Joe

yelvington

http://www.phpbuilder.com/manual/function.urlencode.php

pmanivannan

Try the following code snippet:

while ($data=mysql_fetch_array($result)) {
// include code to display results as you see fit
$title=urlencode($data[1]);
print ($data[0]); print " <a href='book.php?title=";
print $title; print "'>";print $title;
print "</A><BR>";

Anon

There is a really simple way to fix this problem, before you write any of your variables to the database, replace them with HTML entities using ereg_replace() like so:

$description = ereg_replace("'", "'", $description);
$description = ereg_replace("\"", """, $description);

This means that the quotes will be preserved in HTML, including text boxes, and the SQL insert/update won't go haywire.

It also means that you don't have to un-encode the string when you return it from the database.

paul13

Sloan,

The problem with your response is that it is translated by the page that shows the sample code. No one saw the & # 39 all together, because there browsers translated it to '.

another fixer is to replace apostrophese with ''. '' is translated to ' by the majority of SQL based databases

try this:

$strSample = str_replace("'", "''",$strSample)

Sloan Kelly wrote:

There is a really simple way to fix this problem, before you write any of your variables to the database, replace them with HTML entities using ereg_replace() like so:

$description = ereg_replace("'", "'", $description);
$description = ereg_replace("\"", """, $description);

This means that the quotes will be preserved in HTML, including text boxes, and the SQL insert/update won't go haywire.

It also means that you don't have to un-encode the string when you return it from the database.

paul13

replace apostrophese with ''. '' is translated to ' by the majority of SQL based databases

try this:

$strSample = str_replace("'", "''", $strSample)

this will get stuff stored properly.

paul13