Escape character again!

[Anon]

Here is the code.
...
while( odbc_fetch_row( $cur ) ) {
$name = odbc_result( $cur, 1 );
...
}

$name = ereg_replace ("'", "''", $name);
$sql = "SELECT * from dbname where name='$name'";
$curtopic= odbc_exec( $cnx, $sql );
echo $name;

I don't see any reason why the result showed two single quotes, like O''Neil.

Thanks

[Anon]

what exactly are you trying to do? If you are feeding a string into an SQL statement then you should use the addslashes() function. If magic_quotes is set to ON in your php.ini then this will happen automatically when data is submitted thru POST or GET.

[Anon]

I was trying to display the names in an Access database. But one of the names is O'Neil. It turned out to be O''Neil if I used ereg("'","''",$name). It would give me a warning if I use addslashes().

[Anon]

You could try:

$sql = 'SELECT * from dbname where name="$name"';

instead. Then you'll only have problems with quotation marks or whatever they're called.