Apostrophe and line break problems

[baris22]

When I try to insert a sentence with an apostrophe or line break to the database I get an error.

{
	$sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) 
										  VALUES ('$chosenFileType','$title','$description','$linksCollection')";
	
	$query_result = mysql_query($sql_query) or die(mysql_error());

}

this is the code for inserting into the database.

What can I do to solve this problem?


Thanks all.

 

[Kate]

Hi,
You should really take the time to read this to understand how to escape special characters (and avoid SQL injections problems too):
http://php.net/mysql_real_escape_string

 

[Barrucadu]

yes, always escape your variables.

$chosenFileType = mysql_real_escape_string($chosenFileType);
$title = mysql_real_escape_string($title);
$description = mysql_real_escape_string($description);
$links = mysql_real_escape_string($links);

$sql_query = "INSERT INTO `filedetails` (`type`,`title` , `description` , `links` ) VALUES ('$chosenFileType','$title','$description','$links  Collection')";

 

[neroux]

yes, always escape your variables.

Unless you are having magic_quotes_gpc on and are working on external data.

 

[samuofm]

i notice you have two types of apostrophes or single quotes (at least on my screen). Might wanna check that.