my problem is that everytime I call a script that requires $SESSION['name'] the value changes when there is a single quote. How am i changing the value of $SESSION?? i don't want to.
starting the session:
<?php //script 1
$query = "SELECT id, name FROM carfireUsers WHERE login='$l' AND password='$p'";
$result = mysql_query($query);
$row = mysql_fetch_array($result);
session_start();
$_SESSION['name'] = $row[1];
?>
//$_SESSION['name'] = O'Hern
<?php //script 2
session_start();
$name = $_SESSION['name'];
//
// then i make some queries using $name
//
$name = mysql_escape_string($name);
$message = $name . ' > <font color="#666666">' . $message . '</font><br><br>';
$sql = "INSERT INTO CFmessages (message, userOne, userTwo) VALUES ('$message', '$name', '$link')";
$result = mysql_query($sql) or die("1" . mysql_error());
?>
now after this the value of $_SESSION['name'] becomes O\'Hern
How is this??
