when apostrophe ( ' ) is entered. doesnt continue to save

[Keendev]

hi,
I have a small problem on my form and insert page.
I noticed that everytime I put apostrophe on the textfield
and on text area for the description field, the data doesn't insert/save on my database.

any advice would be a great help.. thanks.

 

[jpadie]

you must escape input before you insert it in to a database

$_POST['input']= "John O'Grady";

$sql = "insert into $table set name = '" . [red]mysql_escape_string($_POST['input'])[/red]."'";