Error when using single quotes in form fields

[coben]

When I input information which contains a single quote, for example, "There wasn't a soul around", I get a MYSQL error stating:

Error updating certificate information: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 't

I can input other non alpha-numeric characters and even double quotes, but unless I preceed the single quote with a \, then I get that error. I would prefer not to have to use the \ because other people will be updating information in the database.

I get the error regardless of whether I use the data type of varchar or mediumtext.

Is there a way I can configure MYSQL to allow input of single quotes without preceeding it with \?

Thanks.

 

[sleipnir214]

No, you cannot. MySQL uses single quotes to delineate strings.

The best practice is to have in your appliation code which takes in put and escapes the slashes (changing "'" to "\'") before inserting the string into the database.



Want the best answers? Ask the best questions!

TANSTAAFL!!