MySQL query problem, maybe bug

[eric]

my query:

 

$query = \"INSERT INTO $whattype1 (id, title, description, size, category, bywho, uname, boxurl, urls, type, dateadded) VALUES (\'\', \'$title1\',\'$description1\',\'$size1\',\'$category1\',\'$bywho1\',\'$uname1\',\'$boxurl1\',\'$urls1\',\'$type1\',\'$datetime\')\";

 

it works but if I try to use \' or , in the description it gives errors, it\'s because in the query, it uses \' and , seperate.

[delamitri]

Its because of the \', the commas wont affect it.

 

When adding texual data into the database, its a good idea to use addslashes and when retreiving it back out, use stripslashes.

 

so for instance you should use:

 

$query = "INSERT INTO $whattype1 (id, title, description, size, category, bywho, uname, boxurl, urls, type, dateadded) VALUES (\'\', \'".addslashes($title1)."\',\'".addslashes($description1)."\',\'$size1\',\'$category1\',\'$bywho1\',\'$uname1\',\'$boxurl1\',\'$urls1\',\'$type1\',\'$datetime\')"; 

 

 

See http://www.php.net/manual/en/function.addslashes.php for other ways of formatting text for database and urls.

 

Hope this helps

 

Kevin[/code][/url]