escaping quotes

[Anon]

When users insert comments into my text mySQL field they get errors if they insert a single quote, how can I solve this?

Thank you

[mithril]

Call addslashes() within your sql query on the variable for every field in which a user might enter a single quote.

eg:

$sql = "INSERT INTO your_table (one, two, three) VALUES ('" . addslashes($one) . "', '". addslashes($two) . "', '" . addslashes($three) . "')";

geoff

[Anon]

Thank you Geoff, works perfect!!!!!