Saving post contents to database using php

Asked Apr 01 '16 at 16:13

Active Apr 01 '16 at 16:13

Viewed 15 times

Well, I am making a blog system, but I have a question.

For example I will use this code

$contents = $_POST['contents'];
$conn->query( "INSERT INTO `posts`(`content`) VALUES ('{$contents}')" );

What if the $contents contains ', This will cause an error.

So is there other way to upload text file to database skipping this error?

asked Apr 01 '16 at 16:13

Slavi

You should be using prepared statements instead. – James Apr 01 '16 at 16:15
if you are using `mysli_*` or `PDO` then either `mysqli_real_escape_string()` or `prepared statements` will help you. check the php manual for those. – Alive to die - Anant Apr 01 '16 at 16:16
However, to answer this question, you can use the built-in function, `mysql_real_escape_string`. – James Apr 01 '16 at 16:16

0 Answers0