I feel daft asking this, but it's driving me potty. How can I make this string:
Children\''s Toy
Suitable for insert to a MySQL database and escape the characters properly?
Thanks
+4
A:
mysql_real_escape_string should do it.
If you are using the mysqli extension, you can do it the same way. ( mysqli_real_escape_string )
Jacob Relkin
2010-01-08 15:01:34
This led me to the solution. I was using the following:if (get_magic_quotes_gpc()) {$value = stripslashes($value);}$return_value = "'" . str_replace("'", "''", $value) . "'";but i had to call stripslashes() before i even used this bit of code and that solved my problem... the Notes on the link you supplied helped. Thanks
Jenski
2010-01-08 16:08:38
+1
A:
Like this:
Children\\\'\'s Toy
But you really should be relying on something built into PHP like mysql_reql_escape_string() or better yet, parameterize queries using PDO.
Here's my test of the above:
mysql> select 'Children\\\'\'s Toy' as escapedString;
+------------------+
| escapedString |
+------------------+
| Children\''s Toy |
+------------------+
1 row in set (0.49 sec)
Asaph
2010-01-08 15:03:31