mysql_query with quoates

[duny]

I am tryign to do an insert with php using this mysql_query

mysql_query("INSERT INTO products (product_id, title, description, price, data, demo, design, image, version, req, updated, visits, url, votes, rate, install) VALUES (1, 'Site Access', 'Free Site Access', 0.00, 'a:3:{s:11:"expire_days";s:2:"1y";s:3:"url";s:0:"";s:15:"paypal_currency";s:0:"";}', '', '', 'none.gif', '0.0', 'None', '07/09/06', '1', NULL, '1', '3.5', '')");

but he data row 'a:3:{s:11:"expire_days";s:2:"1y";s:3:"url";s:0:"";s:15:"paypal_currency";s:0:"";}' keeps causing the script to give an mysql error. I know that the " and the ; are causing the error. Is there a work around or solution for this, as for i need to keep that row intact.

Thanks

[nnichols]

You need to escape the double quotes -

mysql_query("INSERT INTO products (product_id, title, description, price, data, demo, design, image, version, req, updated, visits, url, votes, rate, install) VALUES (1, 'Site Access', 'Free Site Access', 0.00, 'a:3:{s:11:\"expire_days\";s:2:\"1y\";s:3:\"url\";s:0:\"\";s:15:\"paypal_currency\";s:0:\"\";}', '', '', 'none.gif', '0.0', 'None', '07/09/06', '1', NULL, '1', '3.5', '')"); 

but presumably this serialized data is being produced programmatically so you could just wrap mysql_real_escape_string() around the serialize().

$data = mysql_real_escape_string(serialize($data));