Insert Text with apostrophies

[MMitchell]

I have the following query that does not work when the text that is past to it from a form has apostropies, or pound signs, or other kinds of characters in the '$new_url' or the $new_note'.

(!mysql_query( "insert into onmylist_person (username, person, notes) values ('$valid_user', '$new_url', '$new_note')"))

I don't get any errors, but it just does not get written to the database.

What do I need to do to it to make it work?

Thanks.

[scoppc]

try this function

function cleanup($input){
//This function will sanitize any input from user
		if (is_array($input)){
			foreach ($input as $key=>$value){
				$input[$key]=cleanup($value);
			}
		}else{
			$input=strip_tags($input);
			if (!get_magic_quotes_gpc()){
				$input=addslashes($input);
			}
			$input=trim($input);
		}
		return $input;
	}

you can "cleanup" all data coming from $_POST by doing this

$_POST=cleanup($_POST);

[Sxooter]

Note that you should always use the dbname_escape() functions, not addslashes, which is not a safe function and is vulnerable to injection attacks.