Question

I’m using ajax to gather the ckeditor data to be submitted. The problem is only the content before the first apostrophe is being submitted to the database. What could I be doing wrong?

Edit:

$date = strtotime($formData['date']);
$article=mysql_real_escape_string($formData['article'],$DBconnect);

$DBconnect=mysql_connect($dbVals['host'],$dbVals['user'],$dbVals['pass']);

mysql_select_db($dbVals['db'], $DBconnect);
$SQLstring="INSERT INTO PressRelease (ip, tym, title, date, article) VALUES('${_SERVER['REMOTE_ADDR']}', ".time().",'${formData['title']}', '$date', '$article')";

I’m fairly new at this so if there is anything else you need to see in order to help let me know.

Answer 1

It sounds like you aren’t escaping the text data before you insert it into the database. Use this function on the data before you pass it into your SQL query:

http://www.php.net/manual/en/function.mysql-real-escape-string.php

Edit: sorry, that’s assuming you are using MySQL.