[SOLVED] single quotes

[sherrilljj]

Hello, everyone

 

I am using mysqli_query to call a stored procedure, passing some variables.

 

The codes appear as below

Mysqli_query($link,"call SPName('$VariableA')");

 

The value of $VariableA contains single quotes,  such as  $VariableA="Sth'S"

 

Then the system gets confused:

call SPName(\'Sth\'S\')can not execute the SP.

Errorcode : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near \'S\')\' at line 1

 

Anyone knows how to solve this problem?

Thanks in advance.

Best

 

[Wildbug]

Try using escaped double-quotes in the query.

 

mysqli_query($link,"call SPName(\"$VariableA\")");

[sherrilljj]

Thanks a lot! It works