Error uploading to database with ' character

Hello,

I am using a HTML form which posts values to a php script which then writes these values to a database. However, whenever a user inputs the ' character, it errors and won't allow me to upload the text.

What can I do to solve this?

Thank you,

Nicky

addslashes() is your friend

will this also output it or does it merely use them / to allow it to get into the database?

also...where would I insert it in my query string?

thanks for your help!

nicky

$string = addslashes($string);

it's ok...i think i've found the answer to part of my own question :-)

$string = addslashes($string);

it's ok...i think i've found the answer to part of my own question :-)

If you are using a mySQL database I would take a look at:

http://www.php.net/manual/en/function.mysql-real-escape-string.php

~UberDragon

just don't forget to use stripslashes() when u get the data from the database ;)

Alex:thumbsup: