Posted by Rik on 04/24/07 18:51

Iván Sánchez Ortega wrote:
> charlespb69 wrote:
>
>> I am new to php so this might be a real simple question. I have a
>> form that users are able to input information into and the information
>> goes into a mysql database table.. But single quotes (apostrophes)
>> are giving me problems. What can I do about this?
>
> RTFM, and use mysql_real_escape_string() when appropiate. That
> means "always".

I thought always, always, always :P

(Not true though, often you can use intval()/floatval(), possibly aided
by foreign key checks.)

--
Rik Wasmus

[Back to original message]