MySQL inserts....

[Anon]

I am having a problem inserting data into a MySQL database with PHP. Everything was working find until I moved my site from my hard drive to my host which has an older version of PHP (4.0.4 compared to my 4.1.1) and probably has an older version of MySQL also. Now, when I insert variables with special characters (like quotes, <>'s, []'s, and others), the insert doesn't work.

So, in short, my question is: what do I need to get the insert to work?

my current code looks like this:

$sql = "INSERT INTO posts SET text = \"" . $p_text . "\", title = \"" . $p_title . "\";

$sql_r = mysql_query($sql);

thats not exactally it, but that gives you an idea, I just need to know what to do so that it won't fail when there are special characters in the variables.

[[deleted]]

That's probably due to 'magic-quotes'
Special characets must be escaped before they are put into the database. Magic-quotes does that (or tries to do that) automatically.

For your host you may need to use addslashes() to escape the data before inserting it.

[Anon]

you should replace the 'Set' word to 'Values'.
Eg.
Insert Into tablename Values ('field1', 'field2')

only used 'set' when you want to update a record.

best regard.