htmlspecialchars() it'nt working

[Anon]

hi!
problem is that i want to enter a string in database which may contain single or double quote and for that i have used htmlspecialchars() and htmlentities()
they work very well on windows but then i upload them on linux server they stop working

ne who knows bout it plz tell ASAP.

thanx in advance.

                    bye

[[deleted]]

any chance of a codesample?

[Anon]

htmlspecialchars and htmlentities are for encoding html values sent to the browser. For data going into the database you want to use addslashes(). htmlspecialchars() won't touch a single quote (') and that is what will bomb you SQL statement.

Jack

[Anon]

thanx borthers
i realy appriciated ur help

but still there is one thing left.
y was it running perfectly on my local pc

the code is:

$desc = htmlspecialchars($desc);

$insert_query="insert into cmenu values ($pmid, $cmid, '$title','$desc', $enb)";

$insert_result=mysql_query($insert_query,$conn) or die("cannot run query");

[Anon]

Check your localhost's php.ini file. It probably has magic quotes on.