MySQL Error when 'this' type of quotation mark in variable

[casbboy]

I have a php update like this:

$upsql = mysql_query("UPDATE comments SET comment2='$oldcomment', comment='$newcomment', edited='y', verified='$verified' WHERE user_id='$userid' AND edited='n' AND comment_id='$commentid'", $connection)
or die(mysql_error());

The problem is that $oldcomment features a ton of text that has both "this" type of quotation marks and 'this' type of quotation marks. I get a mysql error because of these quotation marks when trying to update the database.

I have done a string replace to pull them out just for testing sake and the update works fine... so it is the existance of the quotation marks that are causing issues.

i NEED these quotation marks to remain, but how can I do the update query and avoid the error?

Thanks
Ryan

[thorpe]

[man]mysql_real_escape_string/man.