Apostrophe breaking MySQL query

[qwerty234]

The variable $tools has an apostrophe ' in it. This kills the query. I have tried mysql_real_excape_string($tools) and stripslashes($tools) to no avail as you can see. Any ideas?

 

    $sql  = " INSERT INTO project_tools (id,tool) ";
    $sql .= " VALUES ('$incident_id','$tools') ";

 

    $sql  = " INSERT INTO project_tools (id,tool) ";
    $sql .= " VALUES ('$incident_id','" . stripslashes($tools) . "') ";

 

 

    $sql  = " INSERT INTO project_tools (id,tool) ";
    $sql .= " VALUES ('$incident_id','" . mysql_real_excape_string($tools) . "') ";

[MadTechie]

i think you mean

 

addslashes

or

htmlspecialchars

 

if not try them

[kenrbnsn]

The function is mysql_real_escape_string(), not mysql_real_excape_string().

 

After you generate the query, echo it to the screen to see if the quote character are escaped.

 

Ken

[MadTechie]

ow well spotted kenrbnsn, plus mysql_real_excape_string() should of returned an error,