PHP如何使用转义字符替换客户文本区域撇号

Question

I tried asking this question a week ago but got no answer. Hoping to explain it better this time.

My customer can input anything into a textarea and I am saving that to a MySQL table.

how can I replace all of their apostrophes with a double apostrophe so I don't get a bad query?

I tried the following it didn't work.

$description = str_replace("''", "'", $description);

Answer 1

Hi Landon have you tried this 'mysqli_real_escape_string' function ?

string mysqli_real_escape_string ( mysqli $link , string $escapestr )

exaple like below:

$link = mysqli_connect("localhost", "my_user", "my_password", "world");

$lastname  = "O'Reilly";
$_lastname =mysqli_real_escape_string($link, $lastname);

http://us3.php.net/mysql-real-escape-string