how to eliminate (') character ?

[Anon]

Hi everyone,

I have a search page which has a search box from where the user can enter the search word.

when i enter : 'testing

i got an error from mysql

the problem seems to be with (') character
why i got error with it ?
how can i eliminate it ??

Thanks

[Anon]

Hoang,

Try putting a "@" in front mysql_query(), it will supresss errors messaages from mysql.

ex. @($query_tring, $link_id);

[Anon]

Say the varialbe name that 'testing is coming in to is named $search... You can get rid of the problems caused by the single quote by using this line:

$search = str_replace("'","\'",$search);

Hope that helps

[kparker]

Please tell me you were pulling his leg! Of course you don't want to suppress error messages--at least, not unless you're going to check the return value and print your own version using mysql_error() instead. And regardless, this won't fix the problem, which is that all data from string variables being inserted into a database need to be run through addslashes() first (unless magic_quotes are on.)