How to ignore special characters(" ' , - \ / etc) while data insert.

Question

I storing articles in database that contains special characters like ", ', etc. but it gives error while saving in MySQL:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's and Moral Science's books in school. I clearly remember the picture of a Hindu' at line 1

Answer 1

mysql_real_escape_string everything you put into a query. Always. No exceptions.

Alternatively, use prepared statements.

Answer 2

use mysql_real_escape_string