Insert Strings that contain " ` " or " ' " to the database table - Php

Question

I have to insert some strings to my database.

The problem is that every time I use " ` " or " ' " it causes errors in the Sql.

For ex, when someone types "that's great" , it just messes everything up.

How can I solve this?

Thanks!

possible duplicate of [Insert a value containg single quotes in MySQL](http://stackoverflow.com/questions/887036/insert-a-value-containg-single-quotes-in-mysql) — zero323, Sep 20 '13 at 23:44

score 2 · Accepted Answer · answered Sep 20 '13 at 23:59

2

Use the real escape string function. Actually, MySQL prevents ' or ` from entering the system in order to prevent SQL Injection attacks.

Function Syntax: mysql_real_escape_string($your_string)

answered Sep 20 '13 at 23:59

Lavneet

score 1 · Answer 2 · answered Sep 20 '13 at 23:45

1

answered Sep 20 '13 at 23:45

Could you please help me upgrading my code to mysqli? lets get into a chat. – mn6vdv23g Sep 20 '13 at 23:51

score 1 · Answer 3 · answered Sep 20 '13 at 23:53

1

Use a prepared/parameterized query.

answered Sep 20 '13 at 23:53

McAden

3 Answers3