mysql query with single quotes in a variable

Posted on 16th Feb 2014 07:03 pm by admin

$sitedetails = "INSERT INTO vars (address, sitename, description, ownername, theme) VALUES ('$url', '$sitename', '$description', '$ownername', '$theme') ";
mysql_query($sitedetails) or die(mysql_error()); // site details in mysql

If say $sitename = "scott nicol's blog"; - this will give me:
Code: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's blog test', 'scott nicol', 'scott nicol', 'default')' at line 1
I know it's due to the single quite in 'nicol's', how do I keep the quote, but stop this error?

Your Answer:

Login to answer

Other forums

Perplexing problem showing a .jpg
Please disregard..........I figured it out

How to submit a form to the same page?
I have a table containing information about books in my library and this table has the following col

set xml path in flash when xml created in memorystream and webrequest
i am creating an xml file using memory stream and i want to load this xml file into the flash on cli

How to show the difference between two data field in a database with php.
Hello php gurus,

how r u all... i'm not so well facing a typical problem please help me...<

need help modifying script
Hi guys,

I'm fairly new to php and am having a bit of trouble modifying a script.

This

difference between datetimes
($row['totime']-$row['fromtime'])/60

this is giving me 0

example of totime and fromtim

Server side $_SESSION
how does one keep the session completely server side. no cookies to the browser at all. i need this

Image loading
Hi Developers,

I'm trying to display an image from images/image.gif getting the url from mysq

[RESOLVED] Socket/Port remains open after app crashes
I'm having this problem with a networked app in vb.net.

If the program exits normally the por

php include email form with attachment
I have had no luck with finding a email form all over the Internet for various reasons. Some insecur