Searching With/Without Quotes

[webmasternovis]

Hi all,

I'm looking to search a database, and find results both with AND without quotes.

For example, if I was searching a database for "mikes cool text", I'd want "mike's cool text" to appear. I've tried using LIKE etc but this doesn't work.

Anyone know what to do?

Thanks,
Mike

[bastien]

you need to escape the '

use the [man]mysql_real_escape_string[/man]

[webmasternovis]

Thanks for your quick reply.

After reading that I'm not quite sure about something. First of all, I'm a bit confused on where you use the function? Also, does everything in the database with a ' in have to be escaped?

Thanks a lot,
Mike

[bastien]

escape each text element in the sql string

$text = mysql_real_escape_string($_POST['text']);

//note this does not relieve the need to validate the data

ALL data should be validated. All text should be escaped this way. Anything numeric should be checked that it its numeric etc