On Fri, 8 Jun 2001, Rolf Hopkins wrote:

> What you wrote here and what you wrote below are not the same
>
> update vusers set name="Adrian D'Costa" where id=3;
>
> update vusers set name='Adrian D\'Costa' where id=3;
>
> will both work.  Look up the section on escaping special characters in the
> mysql manual.

If you want to safeguard yourself in future PHP scripts use te PHP
htmlentities() command with the special flag to translate quotes.
The outcome of this is effectively what is described above.

Neil


---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to