single quotes causing me problems

[bloomoon]

i am attempting to include some error handling on my form. ideally i would like the user to input letters of spaces only so i have included this code:

if (strspn($clientname, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ ") !== strlen($clientname)){
echo "The client name field contains non alphabetic characters. Click the BACK button on the browser toolbar to return to the form.";

it works a treat with 1 exception. if the user enters single quotes i just get loads of dynamic sql errors and the like. I am using Interbase NOT MySQL by the way. can anyone help me to provide error handling for those pesky single quotes!

[rinjani]

try using addslashes, puts a \ infront of ' and "

HTH

[rinjani]

If you are error checking and you and to make sure that the content coming over only contains alpha characters you might want to try something like

$my_pattern = "/^{[a-zA-Z]+$/";}
if(preg_match($pattern, $value))
{
return true;
}

or if(!preg_match($my_pattern, $value)) {
echo "some message";
}

The first one returns false if non alpha characters are found.
a-zA-Z is shorthand for the entire alphabet in lower and uppercase - somewhat faster to write.

rinjani