how can i use special characters including operands in mysql query

Asked Sep 07 '16 at 07:23

Active Sep 07 '16 at 07:23

Viewed 28 times

Im having problems with special characters in sql query. I tried escaping using {} , mysqli_escape , but it doesnt work.

My query looks like this....

("SELECT  * FROM cars WHERE  car_id= '$carid' AND car_des='$car_des' AND engine= 'B' "); 

$carid = 123;
$car_des = Toyota <'kk'>;

so my query reads as follows

("SELECT  * FROM cars WHERE  car_id= '123' AND car_des='Toyota <'kk'>' AND engine= 'B' ");

asked Sep 07 '16 at 07:23

erny

Escape; or better yet, learn to use prepared statements with bind variables – Mark Baker Sep 07 '16 at 07:24
Refer to the linked answer for the proper solution – Your Common Sense Sep 07 '16 at 07:25
Back slash the single quotes – Sep 07 '16 at 07:25
("SELECT * FROM cars WHERE car_id= '123' AND car_des='Toyota <\'kk\'>' AND engine= 'B' "); – JYoThI Sep 07 '16 at 07:25
i cant just backslash remember is a declared variable. its not all variables that are going to be like that – erny Sep 07 '16 at 07:27
i have a solution .. i just str_replace " <' " with " <\' " – erny Sep 07 '16 at 09:08

0 Answers0