change html and mysql characters in text to insert it to mysql

[aliento]

Hello,

i want to know how can i change common sql and html characters at the submit form text boxes and textareas so i can insert them in db. 

When i enter the ' character it returns sql error also i dont want to insert html into the db.

Thank you

[aliento]

sorry for my bad English i try the best

[PaulRyan]

You probably need mysql_real_escape_string

[aliento]

Thank you

What i put into the db i show it at html pages so how can i avoid closing an html tag like > ?

[PaulRyan]

You want to display ">"? You use htmlentities when display the data to the user.

 

Take this for example:

 

<?PHP

  $HTML = '<span> THIS IS HTML </span>';
 
  echo 'Will not display ">" - '. $HTML;
 
  echo '<br> ------------------------- <br>';
 
  echo 'Will display ">" - '. htmlentities($HTML);
 
?>

[aliento]

thank you