problem with apostrophes/speech marks

[BIOSTALL]

Hey... i know this has probz been asked a million times before but i cant find a discussion that is in the same context as what i am looking for.. Heres my situation.....

I have a forum and i have a column in one of tables that is titled 'last_post_title'. I'm sure you can guess what is held in it... so basically it works fine but the problem comes if someone adds a title such as 'Heaven's Above' due to the fact is has an apostrophe in it so when i come to call the title as follows at a later date:

"SELECT name FROM Forum_table WHERE last_post_title='$lastposttitle'" it gives me an error due the fact that $lastposttitle contains an apostrophe..

So basically what i'm asking is: is there a way for someone to enter a title containing an apostrophe without it causing errors when called upon at a later date??

Hope this makes sense....

Cheers... BIOSTALL

[drew010]

[man]addslashes[/man] and [man]stripslashes[/man] are what you will want to check out.

[Gasolene]

if using mysql, use the function

mysql_real_escape_string()

[Drakla]

http://www.webmasterstop.com/63.html

This topic really needs to go in a sticky somewhere. The same questions occur in some weird biorhythm on the board, and this week it's magic quotes. Also remember to use htmlspecialchars when outputting data that might have html things in like < and quotes.

[Rodney_H_]

Thanks, Drakla, for posting that link. I read it and learned a thing or too!

-Rodney H. (newbie)