[RESOLVED] single quotes

drpoll

Hi there

I'm working with a MS access database and php and I'm having troubles with single quotes cause they interfere with my sql statement.

This is my code for testing purposes:

$test = "arjan'pollski";

$conn=odbc_connect('starmakertest2','','');
if (!$conn)
  {exit("Connection Failed: " . $conn);}
$sql="UPDATE starmaker1test SET ID = '$test' WHERE Id1 = 383";
$rs=odbc_exec($conn,$sql);
if (!$rs)
  {exit("Error in SQL");}

Ive been working with addslashes etc but only with negative results

Can anyone please help me, I'm getting desperate here

ClarkF1

use

$test = mysql_real_escape_string($test);

before running the query.

drpoll

Thanks for your advise ClarkF1, but it doesn't work.
I get a bunch of errors probably because its an mysql function and doesn't work with MS access

Warning: mysql_real_escape_string() [function.mysql-real-escape-string]: Can't connect to MySQL server on 'localhost' (10061) in C:\ms4w\Apache\htdocs\starmaker\beheerders\content\quottesthandler.php on line 14

Warning: mysql_real_escape_string() [function.mysql-real-escape-string]: A link to the server could not be established in C:\ms4w\Apache\htdocs\starmaker\beheerders\content\quottesthandler.php on line 14

drpoll

Eureka, I found a solution, here it is!

<?php

$kommatest = $_POST[kortenaam];

$newtest = str_replace("'","’",$kommatest);

$conn=odbc_connect('starmakertest2','','');
if (!$conn)
{exit("Connection Failed: " . $conn);}
$sql="UPDATE starmaker1test SET ID = '$newtest' WHERE Id1 = $_POST[idnummer]";
$rs=odbc_exec($conn,$sql);
if (!$rs)
{exit("Error in SQL");}

echo "<b>$_POST[kortenaam]</b><br/>";