Re: [PHP-GENERAL] Apostrophes/SQL Statements

On Mon, 15 May 2000, Jan Dvorak wrote:

> Andrej Trobentar wrote:
> > 
> > Emile Axelrad wrote:
> > 
> > > I'm getting problems with my SQL Statements where the data has apostrophes
> > > [single quotes]. It messes up the insertion procedure - what should I do?
> > > How do I get rid of the single quotes from a string?
> > >
> > > Cheers for your help! I know its an easy question but I can't find the
> > > proper thing to do on it...
> > >
> > > - Emile Axelrad
> > 
> > Maybe this example will help you :
> > print '<PARAM NAME="text1" VALUE="' . $ime . '">';
> > 
> > or this one
> > $stmt = OCIParse($c,"select * from imenik where PRIIMEK='$priimek'");
> 
> Wuups!!
> 
> But this will produce an invalid SQL statement
> for a person called e.g. O'Neil.

You are right!
 
> The cure is simple:
> Put a line such as the following before you construct any SQL:
> 
>   $priimek = AddSlashes( $priimek );
>  
> >  AnD.
> 
> Jan

Thanks for your help Jan! 

 And.