I’m using mysql_real_escape_string to escape my content but I am receiving an error in a SQL INSERTION QUERY for having a single-quote unescaped. How can I resolve this?
$content = mysql_real_escape_string("'content'",$conn);
The error message I am receiving is:
You have an error in your sql syntax near 'content
My SQL Query ENDS UP BEING of the following:
$sql = "INSERT into `table` (`column`) VALUES ("'content'")
INSTEAD OF
$sql = "INSERT into `table` (`column`) VALUES ("\'content\'")
I also tried using single quotes for my delimiter and ended up failing on a double quote not being escaped.
Like people said in your previous that you deleted, you need to give us more informations, like a full example that shows each steps of the construction of your query ; and, also you should give use the SQL query by itself, and the error message you get…
Still, if you allow me quoting your previous question, you said your SQL query was the following :
If it is still that same query, strings in SQL must not be delimited by double quotes (
"), but by simple quotes (').Which means your query should look a bit more like this :