Can't Save MySQL Query [duplicate]

Question

I'm having an issue with my MySQL query/php, I try to update a row in my database that will work usually, but when the string has a ' in it, for example

I don't like green eggs and ham.

The ' in it will cancel the whole response out and not update the row, so if I put something like this without the ' for example:

I dont like green eggs and ham.

The string will save to the row. Below is the MySQL query used and where I get the string from.

$NewMessage = $_POST['message123'];

mysql_query("UPDATE Account SET `function` = 'Message', `note` = '$NewMessage' WHERE `id` = '$ID' AND `Online` = '1'");

If you need anymore source or anything, please let me know, let me know what you think, thanks!

STOP using deprecated mysql_* API. Use mysqli_* or PDO with prepared statements. — Jens
– Jens, Commented Sep 4, 2015 at 7:43
@AbhikChakraborty Wow, forgot all about that, thanks it worked 100%, the smallest things slip me sometimes! — Melternet
– Melternet, Commented Sep 4, 2015 at 7:44
@Jens Will be using that starting in a few days, this is just for testing, thanks! — Melternet
– Melternet, Commented Sep 4, 2015 at 7:45

Logan Wayne · Accepted Answer · 2015-09-04 07:43:27Z

0

Use *_real_escape_string

$NewMessage = mysql_real_escape_string($_POST["message123"]);

But of course, mysql_* API is already deprecated and I would recommend to you to use prepared statement instead.

answered Sep 4, 2015 at 7:43

Logan Wayne

5,98716 gold badges33 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Melternet Over a year ago

Will be using PDO very soon, this is just for testing, thanks!

jasbir singh · Accepted Answer · 2015-09-04 07:46:13Z

0

Hey friend you are need to change single ' with '' commas 2 times. then it is insert your value correct in table other generate error.

Real escape string use where we are need value like this doest. if we user value in database like it does't then right one is use '' 2 time single commas no doule commas

answered Sep 4, 2015 at 7:46

jasbir singh

715 bronze badges

Comments

Yatin Khullar · Accepted Answer · 2015-09-04 07:47:42Z

0

Use simply addslashes() To read more about it click here

E.g in you code simply use addslashes() something like this

$NewMessage = addslashes($_POST['message123']);

I hope it will work for you.

answered Sep 4, 2015 at 7:47

Yatin Khullar

1,5901 gold badge13 silver badges27 bronze badges

Collectives™ on Stack Overflow

Can't Save MySQL Query [duplicate]

3 Answers 3

1 Comment

Comments

Comments

Hot Network Questions