Question

i am having one problem with data insertion.
i have a column which contains quoted strings and using php i am inserting those values into another table.the problem occurs with quoted values and others are inserting fine.
is there any way to unquote that and insert or make it possible using php.
thanks in advance…

Answer 1

Here is an example:

   $myusername = $_POST["user"];
   $mypassword = $_POST["pass"];        

   $myusername = stripslashes($myusername);
   $mypassword = stripslashes($mypassword);
   $myusername = mysql_real_escape_string($myusername);
   $mypassword = mysql_real_escape_string($mypassword);

   $sql="SELECT * FROM $tbl_name WHERE username='$myusername' 
        and password='$mypassword'";
   $result=mysql_query($sql);

This protects against mysql injection