Hello,

This is a reply to an e-mail that you wrote on Thu, 17 Jul 2003 at 01:13,
lines
prefixed by '>' were originally written by you.
> This my problem:
> I have this insert statement in my code that works fine for all
> strings
> except strings that include the following characters:
> ' "

Have yo escaped the data correctly for the database server that you are
using?

For example, if you are using mysql, do this to any sata you intend to use as
data within fields in the query:
    $data = mysql_escape_string($data);
or generally, this should also work:
    $data = addslashes($data);

David.

--
phpmachine :: The quick and easy to use service providing you with
professionally developed PHP scripts :: http://www.phpmachine.com/

          Professional Web Development by David Nicholson
                    http://www.djnicholson.com/

    QuizSender.com - How well do your friends actually know you?
                     http://www.quizsender.com/
                    (developed entirely in PHP)

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to