PHP MySql MsSql How to Insert or Update a ['] or ["] or [`] Char?

Question

Is there anyway to insert values like ' or " or ` into Mysql or MsSql via php and VB.NET?

It always return an error. Sometimes we must insert these character. In the Phpmyadmin, it can inserts/updated with successfull. But how?

Please help, i am newbie. I cannot search it in MySql/MsSql Dev pages. Thanks

Prepared statements or escaping. Prepared statements are the route you should go. — chris85, May 06 '15 at 03:55
Thanks for Mr. @chris85. I get an answer here : http://stackoverflow.com/questions/4763514/mysql-escaping-single-and-double-quotes — Angga Lisdiyanto, May 06 '15 at 04:03

Tech Savant · Accepted Answer · 2015-05-07T02:20:53.177

1

Try using a \ (backslash) in front of the quotes and you should be good to go.

In PHP use the query like this to use mysql QUOTE()

 <?php $query = "
        INSERT INTO
            `mytable`
        SET
            `mycolumn` = QUOTE($myphpvariable)";
 ?>

Or you could use addslashes() in PHP.

$myvariable = addslashes($myvariable);

But what you should REALLY do is use

Prepared Statements.

edited May 07 '15 at 02:20

answered May 06 '15 at 06:39

Tech Savant

But i am insert from php. – Angga Lisdiyanto May 07 '15 at 01:49
@AnggaLisdiyanto I have updated my answer. If you find my answer helpful can you click the up arrow next to it, and if you find it to be the answer that solved your question, can you click the check mark to indicate it is a correct answer. Thanks. :) – Tech Savant May 07 '15 at 02:15

1 Answers1