PHP / mySQL Insert Error

Anon

Not sure if this is a PHP problem or mySQL problem. Whenever I do an Insert (or update) into a mySQL database and the actual data to be inserted contains a single or double quote mark (e.g. roger's data), the Insert fails. I must first go through each data field and replace all double quote marks (") with " and all single quote marks (') with 

Is this normal? Am I doing something wrong? Thanks for any help you can provide.

Roger

Anon

How are you sending data to the database as? Can you show us your UPDATE command?

I think I have an answer for you...but not sure until I see how you're sending the data to the server.

sid666

im not sure if my answer can help you either - but usually the problem can be solved by using the addslashes() function...

so... before you send data to the db, do the following:

$myVariable = addslashes($myVariable);

sid

Anon

Here is my Insert Command:

$sql = "INSERT INTO $datatable ( dt_id, dt_date, dt_what, dt_testimony, dt_source, dt_pic ) VALUES ( NULL, '$entry_date', '$what', '$testimony', '$source', '$real_name' )";

mysql_query( $sql, $myLinkID ) or mySQL_die( $prog_name, "1-sql insert" );

Here is my Update Command:

$valuelist="dt_date='$entry_date', dt_what='$what', dt_testimony='$testimony', dt_source='$source', dt_pic='$real_name'";

$sql = "UPDATE $datatable SET $valuelist WHERE dt_id='$key'";

mysql_query( $sql, $myLinkID ) or mySQL_die( $prog_name, "1-sql update - data" );

Hope this is what you were looking for. And thanks much for your help.

Roger