PHP/mySQL text field trouble - mySQL error upon entry.

gsb

I'm having trouble storing user input text (large and unstructured maybe w/
HTML) into a large text field (user_data) in a mySQL db.

mysql_query( "INSERT INTO data ( user_data, time ) VALUES ( '$raw_data',
'$time' )" ) or die(mysql_error());

CREATE TABLE data (
id mediumint(8) NOT NULL auto_increment,
user_data largetext NOT NULL,
time int(11) DEFAULT '0' NOT NULL,
PRIMARY KEY (id)
);

My error is regarding 'single quote' as in:

You have an error in your SQL syntax near \'s the merchandise receipt

I tried adding slashes but still trouble.

Any ideas?

Thanks,

gsb

thessoro

i think there is no "largetext" type in MySQL. Try "longtext" instead.
If using phpmyadmin SQL sentences to insert the table make sure you write:

 CREATE TABLE `data`

Summing up: the following sentences don't cause any error and the record inserts correctly:

mysql_query ("CREATE TABLE data (id mediumint(8) NOT NULL auto_increment,user_data longtext NOT NULL,time int(11) DEFAULT '0' NOT NULL,PRIMARY KEY (id));",$link);

mysql_query( "INSERT INTO data ( user_data, time ) VALUES ( '$raw_data', '$time' )",$link );

gsb

Sorry.

My typo. longtext is correct as I had it.

The problem was (now solved) that add slashes failes w/ some single quotes.

It is best to:

ereg_replace("'","''",$data); // fix single quotes

and when extracted, reverse the double quotes.

Now it works.

Thanks.

gsb

scoppc

have u tried to use addslashes() function???
stripslashes() will do the reverse...

gsb

Yes I tried addslashes.
But it does not hide single quotes like in "..I'll ".
That is what was throwing off my insert code as in:
mysql_query( "INSERT INTO data ( user_data ) VALUES ( '$raw_data' )");

The above solution is mentioned as a user note by "info at bokelberg dot de
" on the manual page:
PHP Manual -- addslashes

Problem solved.
...but thanks for the help.

gsb