[Resolved] URGENT! syntax error when using " or '

v3nt

i use a form that people need to use ' and ". but my php form gives me these errors. Its my first time using these hosting companies, but i never have this trouble on any other mysql/php servers?

the field properties are VARCHAR and TEXT. and im getting errors from both !

any help much appreciated.

Error in query: . You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'adipiscing elit, sed diam nonummy nibh.', cap2='Quis nostrud ex

DAN.

Roger_Ramjet

Eh !!! ??? !!! I don't even know what that labguage is. Don't suppose many other do either.

At least post the error message, but really you should post the code.

xblue

this is called "magic quotes" (and I sometimes hat it).

for database queries, ' and " need to be escaped. if magic quotes are set to on in the server setting, this happens automatically with form data (and it's up to you to get rid of them if you want to use the data for anything else) . if magic quotes are off in turn, you need to escape it on your own.

v3nt

its just a html form that works normally except when you have ' or " in the field? i know its seeing them as syntax instead of just form text. (the garbled writting is latin, from what was in the formfield)

http://www.communication2005.com/admin/login.php usr= crabbe pswd = letmein

try adding " or ' into the info B field or caption

any ideas? how do you make these characters safe to add into the fields with special characters?
I've not had this problem wwith other servers though...

//
cheers xblue, whats the quickest way to escape them? or turn them on.

PS. i can't play with the php.ini file.

xblue

magic quotes can't be set at runtime, however applying addslashes() to the form content does what magic quotes = on would have done, e.g.

don't

is transformed to

don\'t

which can be safely inserted into a mysql db.

Roger_Ramjet

I thought your problem read : when using (OR), not when using (') or ("). Oh well?

v3nt

cheers anyway. i dared to modify the php.ini file and it works fine now.