Escaping A Quotation

[Xtremer360]

I have a field in my database called height and obviously an example would look like 5'6". I am calling that row and it shows up as 5'6 and doesn't include that following quotation mark. I'm supposed to escape it somehow I think but not sure how. Any tips?

[premiso]

Look into mysql_real_escape_string as that will escape any information going into the database properly.

[Xtremer360]

Still doesn't show that following quotation. Am I dong something wrong still?

 

$query = "SELECT s.hometown, s.height, s.weight,

                h.kowtitles, h.kowawards,

                w.nicknames, w.finisher, w.setup, w.music

        FROM `efed_bio_singles`  AS s,

              `efed_bio_history`  AS h,

              `efed_bio_wrestling` AS w

        WHERE s.bio_id = '$defaultcharacterid' AND

          h.bio_id = '$defaultcharacterid' AND

          w.bio_id = '$defaultcharacterid'";

  $result = mysql_query($query);

$row = mysql_fetch_array($result);

$height = mysql_real_escape_string($height); 

 

And then this in the form: <?php echo $row['height']; ?>

[Xtremer360]

Did some research and came up with <?php echo htmlspecialchars($row['height']); ?> and it works.