Categories:
.NET (357)
C (330)
C++ (183)
CSS (84)
DBA (2)
General (7)
HTML (4)
Java (574)
JavaScript (106)
JSP (66)
Oracle (114)
Perl (46)
Perl (1)
PHP (1)
PL/SQL (1)
RSS (51)
Software QA (13)
SQL Server (1)
Windows (1)
XHTML (173)
Other Resources:
How To Quote Text Values in SQL Statements
How To Quote Text Values in SQL Statements? - PHP Script Tips - Working with MySQL Database
✍: FYIcenter.com
Text values in SQL statements should be quoted with single quotes ('). If the text value contains a single quote ('), it should be protected by replacing it with two single quotes (''). In SQL language syntax, two single quotes represents one single quote in string literals. The tutorial exercise below shows you two INSERT statements. The first one will fail, because it has an un-protected single quote. The second one will be ok, because a str_replace() is used to replace (') with (''):
<?php include "mysql_connection.php"; $notes = "It's a search engine!"; $sql = "INSERT INTO fyi_links (id, url, notes) VALUES (" . " 201, 'www.google.com', '".$notes."')"; if (mysql_query($sql, $con)) { print(mysql_affected_rows() . " rows inserted.\n"); } else { print("SQL statement failed.\n"); } $notes = "It's another search engine!"; $notes = str_replace("'", "''", $notes); $sql = "INSERT INTO fyi_links (id, url, notes) VALUES (" . " 202, 'www.yahoo.com', '".$notes."')"; if (mysql_query($sql, $con)) { print(mysql_affected_rows() . " rows inserted.\n"); } else { print("SQL statement failed.\n"); } mysql_close($con); ?>
If you run this script, you will get something like this:
SQL statement failed. 1 rows inserted.
2007-04-19, 4682👍, 0💬
Popular Posts:
What is the concept of XPOINTER? XPOINTER is used to locate data within XML document. XPOINTER can p...
When does the compiler not implicitly generate the address of the first element of an array? Wheneve...
What is the sequence of UML diagrams in project? First let me say some fact about this question, you...
What is test metrics? Test metrics accomplish in analyzing the current level of maturity in testing ...
What is the purpose of Replication ? Replication is way of keeping data synchronized in multiple dat...