quotes and slashes and such

[bizshop]

I've a large db that has many entries containing single quotes (O'Malley, etc) I had no choice to feed it in with slashes, the DB is inplace.

I need to do a LIKE query, since users may not know correct spellings

Select * from Table Where LastName LIKE '$query%' works when there are no quotes in either query or record but fails if there are.

I've tried addslashes and stripslashes in various combos but haven't found one that works.

[[deleted]]

Have you printed the content of your database to see just what really is in it? I mean, are there really slashes single quotes in there, or are there html codes that represent a single slash? (I've seen stranger things happen)

[bizshop]

Actually, the db contains single quotes, no slashes.

For instance, lastName record in MySQL is O'Brien

The search is done from a prior page that asks which last name, puts that into a variable $LAST

How do I query based on that? The PHP query is:

$result=mysql("$DBName","SELECT ItemID FROM Items WHERE lastName='$LAST'");

Note that there are double quotes in the query phrase, and single around the variable - so the ' mark in O'Brien breaks the query.

[Anon]

You need to addslashes to $LAST BEFORE the query. Don't try to use addslashes() inside the query.

[[deleted]]

The slashes are only added to stop the database server from interpreting the quotes as part of the query.

if you insert a slashqoute, then the database will contain only the quote.

So you should be able to compare with a slashquote.