apostrophies in a text field

[Anon]

How can I prevent problems with apostrophies(') in a field in a database? It will not insert data when something like South's is in the field?

Best Regards

Stiaan

[Anon]

you must put 2 apostrophies :

insert into table
values ( 'South''s',...);

[Anon]

use addslashes($foo) before or while inserting into your database query string.

Alternately, see if you can enable magic_quotes_gpc either when compiling PHP or by modifying the php.ini file (PHP4 seems to default magic_quotes_gpc to ON while PHP3 seems to default to OFF).

Hope that helps.

Rob

[Anon]

Can you please tell me how I would implement the addslashes() function in an insert into command?

[Anon]

There's a couple of ways of using the addslashes() with an INSERT command (the syntax below should be close).

1.
$query = "INSERT INTO table VALUE ('".addslashes($foo)."',".time().")";

or 2.
$foo = addslashes($foo);
$query = "INSERT INTO table VALUE ('$foo',".time().")";

or 3.
$query = sprintf("INSERT INTO table VALUES "."('%s',$d)",addslashes($foo),time());

You might also look at www.php.net for the PHP manual and search for addslashes() or magic_quotes.

Hope that helps.

Rob