sql php单引号或撇号

Question

How do i search @ display variable that contains single quote ( ' ) by using sql & php?

Ex: CompanyName = ABC'S ENTERPRISE

$comp_name (as variable)

$tsql = "SELECT CompanyName from tbl.company WHERE CompanyName LIKE '%$comp_name%'";

Answer 1

use addslashes php function like this

$tsql = "SELECT CompanyName from tbl.company WHERE CompanyName LIKE '%".addslashes($comp_name)."%'";

for you example

CompanyName = ABC'S ENTERPRISE

addslashes will add a slash like

ABC\'S ENTERPRISE

Now the resulting query will be

SELECT CompanyName from tbl.company WHERE CompanyName LIKE 'ABC\'S ENTERPRISE'