Apostrophe and line break problems

baris22 · 05-26-2007, 05:15 AM

When I try to insert a sentence with an apostrophe or line break to the database I get an error.

PHP Code:

   
????: NamePros.com http://www.namepros.com/programming/332177-apostrophe-and-line-break-problems.html
{

    $sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) 

                                          VALUES ('$chosenFileType','$title','$description','$linksCollection')";

    

    $query_result = mysql_query($sql_query) or die(mysql_error());

 
}

this is the code for inserting into the database.

What can I do to solve this problem?

Thanks all.

sdsinc · 05-26-2007, 05:56 AM

Hi,
You should really take the time to read this to understand how to escape special characters (and avoid SQL injections problems too):
http://php.net/mysql_real_escape_string

Barrucadu · 05-26-2007, 08:58 AM

yes, always escape your variables.

PHP Code:

  $chosenFileType = mysql_real_escape_string($chosenFileType);

????: NamePros.com http://www.namepros.com/showthread.php?t=332177
$title = mysql_real_escape_string($title);

$description = mysql_real_escape_string($description);

$links = mysql_real_escape_string($links);

 
$sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) VALUES ('$chosenFileType','$title','$description','$links  Collection')";

neroux · 05-29-2007, 03:21 AM

Originally Posted by Mikor

yes, always escape your variables.

Unless you are having magic_quotes_gpc on and are working on external data.

samuofm · 05-30-2007, 01:35 PM

i notice you have two types of apostrophes or single quotes (at least on my screen). Might wanna check that.

05-26-2007, 05:15 AM	THREAD STARTER #1 (permalink)
baris22 NamePros Member Join Date: Jan 2007 Posts: 98	Apostrophe and line break problems When I try to insert a sentence with an apostrophe or line break to the database I get an error. PHP Code: ????: NamePros.com http://www.namepros.com/programming/332177-apostrophe-and-line-break-problems.html { $sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) VALUES ('$chosenFileType','$title','$description','$linksCollection')"; $query_result = mysql_query($sql_query) or die(mysql_error()); } this is the code for inserting into the database. What can I do to solve this problem? Thanks all.

05-26-2007, 05:56 AM	#2 (permalink)
sdsinc Domains my Dominion Join Date: Aug 2005 Location: Web 1.0 Posts: 9,558	Hi, You should really take the time to read this to understand how to escape special characters (and avoid SQL injections problems too): http://php.net/mysql_real_escape_string __________________ NameNewsletter.com - free lists of available domain names ZoneFiles.net (beta) - ccTLD and gTLD droplists

05-26-2007, 08:58 AM	#3 (permalink)
Barrucadu Senior Member Join Date: Aug 2005 Location: East Yorkshire, England Posts: 2,689 Follow @barrucadu	yes, always escape your variables. PHP Code: $chosenFileType = mysql_real_escape_string($chosenFileType); ????: NamePros.com http://www.namepros.com/showthread.php?t=332177 $title = mysql_real_escape_string($title); $description = mysql_real_escape_string($description); $links = mysql_real_escape_string($links); $sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) VALUES ('$chosenFileType','$title','$description','$links Collection')"; __________________ Website \| Blog Arch Hurd developer; GNU Webmaster; FSF member #8385

05-30-2007, 01:35 PM	#5 (permalink)
samuofm New Member Join Date: Mar 2007 Posts: 16	i notice you have two types of apostrophes or single quotes (at least on my screen). Might wanna check that.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)