what to do with -> ' <- in SQL?

kvasarnomad · 10-16-2004, 10:25 AM

In a database I done i included a comment colum
but when I tested it and wrote as comment:
-> I haven't got it to work <-
the entry wasn't added
and I realized why it is the -> ' <- in dosen't
how should I do if one writes a word with ' in?

Im using PHP and MySQL

here is the sql syntax thats troubling me when $comment="I haven't got it to work";

Code:

$insertcard="INSERT INTO cards(brand, type, name, comp, comment) VALUES('$brand', '$type', '$name', '$comp', '$comment')";

acid_kewpie · 10-16-2004, 10:32 AM

does this look familiar?

http://www.webmasterstop.com/tutoria...c-quotes.shtml

and in brief. use the addslashes() funciton

david_ross · 10-16-2004, 10:37 AM

Try escaping with addslashes - replace $comment with:
addslashes($comment)

kvasarnomad · 10-16-2004, 10:51 AM

Ok I used the addslashes on $comment and now it works!
thanks!