Home/ Questions/Q 7963495
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T05:37:05+00:00

I am attempting to insert data into a table that contains a lot of

  • 0

I am attempting to insert data into a table that contains a lot of single and double quotes. 

INSERT INTO vulnerabilities_internal_test (device_type, ip_address, user_tag, 
repositoryID, severity, pluginID, pluginName, pluginText)

VALUES ("@Data.device_type~", "@Data.ip_address~", "@Data.user_tag~", 
"@Data.repositoryID~", "@Data.severity~", "@Data.pluginID~", "@Data.pluginName~", 
replace(replace("@Data.pluginText~", ',', ''), '"', '' ))

I am receiving the following error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘Thorough tests” was not enabled\nwhen this scan was run.\n\nCVE : CVE-2011-1000,’ at line 3

However the data looks like this:

Thorough tests” was not enabled\nwhen this scan was run.\n\nCVE : CVE-2011-1000

Does anyone have an idea why one of the double quotes being replaced with a single quote and throwing this error?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It shouldn’t matter. The problem is that your data should have all quotation marks escaped with a slash (‘\’). That way, you just need to unescape the data when returning results to your code.

    • 0