MySQL insert with quotes (")

[cmason22]

i've tried using addslashes and i still can't get MySQL to accept my data with quotes. the data goes in, just loses the quotes. the 4th element is the only one with quotes in the data

<?
$fp = fopen("./filename.txt", "r");

while ($line = fgetcsv($fp, 1000, "\t"))
{
$line[3] = addslashes($line[3]);

$query = "INSERT into table (one,two,three,four,five) values ('$line[0]','$line[1]','$line[2]','$line[3]','$line[4]')";

mysql_db_query ($db, $query, $connection);

}

mysql_close($connection);
?>

would love some tips to help me out.

[cmason22]

not sure why my post has funny linebreaks in there... sorry about that.

[ednark]

you might want to try looking into the function [man]mysql_escape_string[/man] or if you are lucky enough to be using 4.3.0+ try [man]mysql_real_escape_string[/man]

[adamdfx]

i've got the same problem, but i'm using MS SQL. is there any function or method comparable to mysql_escape_string() that i can use?

[ednark]

[man]add_slashes/man is the generic form

you could also run your own [man]str_replace[/man] or [man]preg_replace[/man] or [man]ereg_replace[/man]

to specifically remove or slash out naughty characters