在MySQL中插入包含单引号的值[重复]

Question

This question already has an answer here:

• How can I prevent SQL injection in PHP? 28 answers

How do I insert a value in MySQL that consist of single or double quotes. i.e

Ali said, "This is Ashok's Pen." 

The single quote will create problems. There might be other escape characters.

I am using php to enter data into the database?

How do you insert the data properly?

</div>

Answer 1

You need to use \ (Escape) character to insert single quotes and double quotes.

INSERT INTO table_name(`clomn1`) VALUES ('Ali said, "This is Ashok\'s Pen."')

Hope this helps.