Question

I want to execute a mysql query from php.

$sql = insert into q_links values ( 'garment.png', 'imgs\ques\p1\garment.png' );

I couldn’t store the url as it is, rather it is being stored like this: imgsquesp1garment.png. But I want to store the url like: imgs\ques\p1\garment.png. So I tried this:

$sql = mysql_real_escape_string($sql);

But this way my $sql looks like:

insert into q_links values ( \'garment.png\', \'imgs\\ques\\p1\\garment.png\' );

which do not work in the mysql database.

I have to insert this url in the database for later use. The url is imgs\ques\p1\garment.png. How can I achieve this?

Update:
And I tried with the first comment which worked for me.

So the solution is:

$sql = "insert into q_links values ( 'garment.png', '".mysql_real_escape_string( 'imgs\ques\p1\garment.png' )."' );";

Answer 1

Add the escape only for img field:

$sql = "insert into q_links values ( 'garment.png', '".mysql_real_escape_string( 'imgs\ques\p1\garment.png' )."' );"