using quotations within text in a database

[rbastien]

Hey,

 

I have a textarea that sends the text to the database.

<textarea name="example" method="post" />

 

The problem is that if the text contains anything that will obstruct the php coding (such as a quotation mark, a semicolon, bracket, etc...) it processes it, and results in a MYSQL error. The database row is set to VARCHAR NOT NULL.

 

@extract($_REQUEST);
mySqlconnect(); 
mysql_query("INSERT INTO table(id, artist, song) VALUES ('5', '$artistname', '$songname')");

 

It works perfectly without using any characters that will interrupt the code. Will i have to insert a backslash every time I use a special character, or is there an easier way?

[jitesh]

INSERT INTO table(id, artist, song) VALUES ('5', addslashes('$artistname'), addslashes('$songname')");

 

Then when you access data from database filter data by stripslashes

 

These are PHP APIs

addslashes

stripslashes