how to select name from db with special characters?

[Monkuar]

$DB->query("SELECT id,name from ibf_members where name = '{$ibforums->input['to']}' LIMIT 1");
       $e2 = $DB->fetch_row();
   if ($e2['id']){
   }else{
   $std->Error2("Username doesn't exist dude");
   }

 

 

Ok, if I put in my username let's say

 

1of my users name is

 

"$tabB"

 

if I do that, it doesn't work

 

is there a work around?

[AyKay47]

escape the string to be used in your query, which you should always do anyway.

[Monkuar]

escape the string to be used in your query, which you should always do anyway.

 

 $user= mysql_real_escape_string($ibforums->input['to']);
   	$DB->query("SELECT id,name from ibf_members where lower(name = '{$user}') LIMIT 1");
       $e2 = $DB->fetch_row();
   if ($e2['id']){
   }else{
   $std->Error2("Username doesn't exist dude");
   }

 

doesn't work either

 

, $ibforums is escaped too

 

Thanks for ur comment anymore idea?

[Monkuar]

blah it seemd like something from ibforums was making it get convered into hex