PHP插入MYSQL'和“语法错误

Question

So, I am trying to insert into an mysql table a value of a variable. The variable contains both ' and " special characters, so when these occur, it gives a syntax error as it sees it as double ''. Any ideas how I can get around this? I have tried both '' and \" \" variations.

$sql = "INSERT INTO BBC (title, link, description, date)
    VALUES (\"$value\", \"$link1[$c]\", '$description1[$c]', \"$date[$c]\")";

Answer 1

test this

 $mysqli = new mysqli("localhost", "my_user", "my_password", "world");
    $value = $mysqli->real_escape_string($value);
    $link1[$c] = $mysqli->real_escape_string(link1[$c]);
    $description1[$c]= $mysqli->real_escape_string($description1[$c]);
    $date[$c]= $mysqli->real_escape_string($date[$c]);

    $sql = "INSERT INTO BBC (title, link, description, date)
       VALUES 
      ('$value', '$link1[$c]', '$description1[$c]', '$date[$c]')";