Обсуждение: insert a special character

hello,
       I have a string with ' this symbol in the middle of  the text
     example:-
             " that book belong to rahul's sister"

    this string is to be stored in the variable "$strexp"
    when I am inserting this variable in database table
    following error apperes


   " parse error at or near "s" "

    How can I read the string and store in a variable and insert the same
into the database table ?

thanks in advance ,
with regards,
Arun

You need to go:

addSlashes($strexp) on the string before inserting it.

This will replace all 's and "s with \' and \"

You open up a massive security hole in your database if you're not
addSlashing every value that goes in...

Chris


> -----Original Message-----
> From: pgsql-php-owner@postgresql.org
> [mailto:pgsql-php-owner@postgresql.org]On Behalf Of arun kv
> Sent: Thursday, 28 March 2002 1:19 PM
> To: PGSQL
> Subject: [PHP] insert a special character
>
>
> hello,
>        I have a string with ' this symbol in the middle of  the text
>      example:-
>              " that book belong to rahul's sister"
>
>     this string is to be stored in the variable "$strexp"
>     when I am inserting this variable in database table
>     following error apperes
>
>
>    " parse error at or near "s" "
>
>     How can I read the string and store in a variable and insert the same
> into the database table ?
>
> thanks in advance ,
> with regards,
> Arun
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
>

Hi,

>        I have a string with ' this symbol in the middle of  the text
>      example:-
>              " that book belong to rahul's sister"
>
>     this string is to be stored in the variable "$strexp"
>     when I am inserting this variable in database table
>     following error apperes
>
>
>    " parse error at or near "s" "
>
>     How can I read the string and store in a variable and insert the same
>into the database table ?

Use the addslashes function.

Basically:
$newstring = addslashes($oldstring);
or
$newstring = addslashes("this is some sampl''e text''");

  See http://www.php.net/addslashes for more details.

Then, when you get it out of the database you need to stripslash the
string. (Does the above in reverse).

HTH,

-----------------
      Chris Smith
http://www.squiz.net/

Swich Magic Quotes On

http://www.pgexplorer.com
PosgtreSQL Frontend Client


----- Original Message -----
From: "arun kv" <arun@library.iisc.ernet.in>
To: "PGSQL" <pgsql-php@postgresql.org>
Sent: Thursday, March 28, 2002 7:18 AM
Subject: [PHP] insert a special character


> hello,
>        I have a string with ' this symbol in the middle of  the text
>      example:-
>              " that book belong to rahul's sister"
>
>     this string is to be stored in the variable "$strexp"
>     when I am inserting this variable in database table
>     following error apperes
>
>
>    " parse error at or near "s" "
>
>     How can I read the string and store in a variable and insert the same
> into the database table ?
>
> thanks in advance ,
> with regards,
> Arun
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)