updating an access record issue

[Anon]

In my php3 script, I have the following
section of code that updates my access
database when a user enters in a new
product.

The problem I'm having is that if the
user enters a ' or " char - it won't
add it to the access database.

Below is my code...

$sQuery = "INSERT INTO product ";

$sQuery .= "(product, origin, quantity, packing, price, notes, datez, active)";

$sQuery .= " VALUES ";

$sQuery .= "('$sProduct', '$sOrigin', '$sQuantity', '$sPacking', '$sPrice', '$sNotes', '$sTodaysDate', $iActive)";

$iResult = odbc_exec($iConnect, $sQuery);

Any help would be appreciated.

Thanks.

[brandonschnell]

addlashes()

http://www.php.net/manual/en/function.addslashes.php

[mithril]

The manual reference is correct, but the addslashes() function won't work for MS Access as it doesn't support C-style escaping. You need to use double-piping instead. There used to be an example function in the user contributed notes, by it seems to have disappeared. I've added it in again, but just in case it doesn't show up for awhile here it is:

  function odbcAddSlashes($foo) {
    $foo = str_replace("'", "''", $foo);
    $foo = str_replace('"', '""', $foo);

      // return the modified value
    return $foo;
  }

N.B. String's escaped but this function will also insert properly into many other databases like MySQL and Oracle.

-geoff

[Anon]

Thanks for your help.
It works great!