[HELP] Quotation Marks & Apostrophes

[Solar]

Well, I never realized this but when submitting a form, either Quotation Marks or Apostrophes works. I maybe "bad coding" it.

 

To have Quotation Marks work

<?php mysql_query("INSERT INTO wallposts (username, userfriend, date, ip, message)VALUES(\"$username\", \"$userfriend\", \"$date\", \"$ip\", \"$message\")"); ?>

 

To have Apostrophes work

<?php mysql_query("INSERT INTO wallposts (username, userfriend, date, ip, message)VALUES('$username', '$userfriend', '$date', '$ip', '$message')");  ?>

 

I mainly need both to work for $message. Is there a simple solution? Do I need to extend a variable?

 

Thanks!

 

Edit: Extending my question for a better understanding.

When a user uses characters like quotation marks and or apostrophes one or the other works, depending on the code provided above. How can I fix this?

[Solar]

I've decided to use STRIP_TAGS method and it worked.

$message = htmlentities(strip_tags($_POST['message']));

 

Please correct me if I am using this wrong.

[Pikachu2000]

mysql_real_escape_string