I just found out because someone had a ' in their last name and it caused the script to not update anything after that. What’s the best way to make their last name safe of any potental damaging characters?
I just found out because someone had a ‘ in their last name and
Share
You should probably be using prepared statements if you’re embedding the SQL to insert records into the DB in your logic. Among other things they will properly escape data values for you (as long as you use them consistently.)