is escaping a solution?
addslashes() for your insert-query
stripslashes() for your select-query

"Aaron Axelsen" <[EMAIL PROTECTED]> schrieb im Newsbeitrag
news:[EMAIL PROTECTED]
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I have a php script set up for a user to upload a word document,
> which is then coverted to html form, which I would then lke to store
> in a database.
>
> Howver, when I run the following command:
>
> INSERT into sermons (data) VALUE ('$output');
>
> It failes to work, because the $output strings contains "", which
> messes things up.  Is there some way that this can be ignored while
> entering into the databse?
>
> Or am I better of replace all the "" with ''?
>
> Thanks for the assistance.
>
> - ---
> Aaron Axelsen
> AIM: AAAK2
> Email: [EMAIL PROTECTED]
>
> Want reliable web hosting at affordable prices?
> www.modevia.com
>
> Web Dev/Design Community/Zine
> www.developercube.com
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
>
> iQA/AwUBPw4PI7rnDjSLw9ADEQLL5QCg6rxSs/roIiGyxC6nN3XNiuONg00AoK/T
> PSAAAbM+O7+e6iVNMMnpK5AC
> =phqJ
> -----END PGP SIGNATURE-----
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to