how do i make a select on sql statment
where i have something like this :
select * from mydb1 where name=bla'ewrewr
how do i do that?
beacuse the " ' " makes me problem
thanks in advance
peleg
__________________
sql and '
Moderator: General Moderators
Code: Select all
$name = "bla'ewrewr";
$name = str_replace("'", "''", $name);
$sql = "select * from mydb1 where name='$name'";Yes. but also be aware it can be dependent on things like magic_quotes.