[SOLVED] Problems with INSERT and apostrophes.

[php_beginner_83]

Hi All

 

I'm trying to create an upload page (form) where I can add photos (the path of the image) and a description of the photo to a database.  I'm coming across problems when in the 'description'.  If I use ' it creates an error, for example, 'I'm a bear'.  When I use Im a bear, there is no problem.

I'm still fairly new to php and would appreciate any comments on this. 

 

My code is..

 

$insert = "INSERT INTO pictures (ID, Description, Path) VALUES ($newID, '{$_POST['imageDescription']}', '" . $string . "{$_POST['path']}')";

mysql_query($insert) or die(mysql_error());

 

It's this insert where the problem is.

 

Thank you.

[zq29]

mysql_real_escape_string()

[php_beginner_83]

Should $insert go into that function or just the part that contains the apostrophes i.e. $_POST['imageDescription']

 

Thanks

[kickstart]

Hi

 

Just the part with the apostraphies

 

$insert = "INSERT INTO pictures (ID, Description, Path) VALUES ($newID, '".mysql_real_escape_string($_POST['imageDescription'])."', '" . $string . mysql_real_escape_string($_POST['path'])."')";

 

All the best

 

Keith

[php_beginner_83]

Thanks Keith, that worked a treat