Securely handling characters into Mysql

[thedaver]

I'm coding some PHP and MySQL work now. I have always just filtered out user input characters such as
" ' " ; - "

So as to avoid SQL injection. I now have a requirement to allow the apostrophe "'" to the input. Is it sufficient to use a PHP escaping command to allow the apostrophe? Just trying to be safe. Any external links on the topic would be welcome, my googling is coming up pretty poorly.

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[sleipnir214]

I'd just run the string through mysql_escape_string()

Want the best answers? Ask the best questions!

TANSTAAFL!!