Query Question

[TheMayhem]

I'm running a merge script in between forums and every so often an error will be caused. This reason is a ' is found in a user's email address that screws up the sql executing query and thus causes an error and the script stops.

So do you guys know any sql query I can do that'll detect any ' in the user's email address column which is called email in a user table that I can run so I can go fix them now?

[toplay]

Quick reply:

1) Code should always validate user input before inserting/updating database.

2) You must backslash any quotes that are part of the data before inserting/updating database. In PHP you can use the mysql_escape_string() or mysql_real_escape_string() functions.

See my post here:
http://www.phpbuilder.com/board/showpost.php?p=10648400&postcount=9

Manual page:
http://dev.mysql.com/doc/mysql/en/string-syntax.html