[RESOLVED] what am i doing wrong?? adding strings with quotes into mysql

[iBuddy]

I am using htmlspecialchars because some strings that I am adding to mysql (articledate) are like the following:
Friday - September 15, 2006 by Jolene "foxxylady" Petipas
(the quotes are causing problems)

#sql

$sql = mysql_query("insert into import
					(
			title,
			article, 
			id, 
			stamp
					 ) 
VALUES
					 (
			'". htmlspecialchars($title) . "',
			'". html2text($article) . "',
			'$articleid', 
			'". htmlspecialchars($articledate) ."')") or mysql_error($sql);

I keep getting this error:

Warning: mysql_error(): supplied argument is not a valid MySQL-Link resource in /home//public_html//script.php on line 72

Line 72:

			'". htmlspecialchars($articledate) ."')") or mysql_error($sql);

[iBuddy]

This function I use to strip html to text and it works perfectly. The main problem is storing a string to the mysql

function html2text($string)
{
    // Remove links
    $string = ereg_replace("<a href=[^>]*>", "", $string);
    $string = ereg_replace("</a>", "", $string);
    // escape /*_ chars (but NOT / after < or before >)
    $string = ereg_replace("([^<])([*_/])([^>])", "\\1\\\\\\2\\3", $string);

// underline
$string = ereg_replace("<u>", "_", $string);
$string = ereg_replace("</u>", "_", $string);
// italic
$string = ereg_replace("<i>", "", $string);
$string = ereg_replace("</i>", "", $string);
// newlines: php retains \n's, so just remove
$string = ereg_replace("<br>", "", $string);
$string = ereg_replace("<br />", "", $string);

return $string;
}

[iBuddy]

There is a problem because the string of $article is the following:

 A Pete Rock produced track is set to appear on CL Smooth's upcoming solo debut album titled American Me.

Titled "It's a Love Thing," the song marks the first time the duo have worked together since their second fallout in 2004.

As SOHH previously reported, American Me will also feature production from The Heatmakerz, Kaygee and Tramp of Divine Mill and Mike Loe.

Prior to the album's release, Smooth will release a Best Of CL Smooth mixtape with DJ J. Period.

American Me hits shelves on October 17th. 

As you can see this contains a bunch of stuff to make mysql bug out like quotes commas single quotes etc. What would be the best way to add this?

[iBuddy]

'".mysql_escape_string($article)."',
worked like a charm

[Piranha]

iBuddy wrote:

'".mysql_escape_string($article)."',
worked like a charm

Look at mysql_real_escape_string as well.

And make sure that you escape everything that you use in a SQL statement (even select statements), otherwise it's easy to for example log in without having a username and password.