Question

I have a problem. When I do an insert like so in php:

sql = "INSERT INTO mytable (id, value)
VALUES ('sds83','".$EncryptedString."')";

When I run the following query it sometimes works and sometimes it doesn’t. The problem is that sometimes the $EncryptedString contains characters like this: ‘)’)
which causes syntax errors. The $EncryptedString contains binary data, how can I go about this issue?

Answer 1

Escape your encrypted string

mysql-real-escape-string

mysql_real_escape_string() calls MySQL’s library function
mysql_real_escape_string, which prepends backslashes to the following
characters: \x00, \n, \r, \, ‘, ” and \x1a.

See StripSlashes