Question

I’m inserting some HTML into a MySQL database table. But when I get it back, many characters are mangled. Two specific cases I noted are:

1. the single quotes are getting converted to �,
2. code that earlier read class='content-section developer-support' has got converted to developer-support\="" class="\'content-section"

I understand that its an escaping problem. I use mysql_real_escape_string on the field before I push it into the db.

What is the right way to avoid this problem?

---

source:

    $query = sprintf("insert into events (title, content) values('%s', '%s')",
            mysql_real_escape_string($this->title, $conn),
            mysql_real_escape_string($this->content, $conn)
    );

the text I’m talking about is inserted into the field content.

and I do have magic_quotes enabled. I’ll fix it.

Answer 1

I think you have magic_quotes enabled in your PHP configuration and also, seems, something is trying to clean your HTML. You need to show your source.