Mysql error while inserting a paragraph

Question

I am trying to insert a Paragraph (which contains a single quote in middle) into database as below.

$rule="**Mobile's** are not allowed into the room...................soon";


mysql_query("insert into table_name (rule) values('$rule')");

While executing the query that paragraph is not inserting. And i have directly tried in the Mysql using SQL option. There it shown error.

Any suggestions..?

Thanks

that "error" may be interesting to read, don't you think? also, with that, which i already know, you can easily debug your problem — STT LCU, May 09 '13 at 12:58

score 1 · Answer 1 · edited May 25 '19 at 14:41

Some questions to make you think:

What do double quotes (") mean in PHP?
What are their effect on a string which contains a variable?
What is "input sanitation"?
What is "character escaping"?
What is PDO?

Also, and most importantly:

Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO, or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial.

score 1 · Answer 2 · edited May 23 '17 at 11:55

The best way to handle such thing is to use PDO extension or MySQLi. They are designed to prevent from SQL Injection.

example of using PDO.

$rule = "**Mobile's** are not allowed into the room...................soon";
$stmt = $pdo->prepare("insert into table_name (rule) values(:rule)");
$stmt->execute(array(':rule' => $rule));

best link that I can give that explains how bad is the query the breaks when a value contains single quotes:

How can I prevent SQL injection in PHP?

score 0 · Accepted Answer · answered May 09 '13 at 12:58

0

use

$rule = mysql_real_escape_string("**Mobile's** are not allowed into the room...................soon");

answered May 09 '13 at 12:58

Orangepill

24,500
3
42
63

score 0 · Answer 4 · answered May 09 '13 at 13:03

You may use mysql_real_escape_string() before sending values to Mysql database table. please check this link http://php.net/manual/en/function.mysql-real-escape-string.php

$rule="**Mobile's** are not allowed into the room...................soon";
$rule1=mysql_real_escape_string($rule)
mysql_query("insert into table_name (rule) values('$rule1')");

Mysql error while inserting a paragraph

4 Answers4