quote escaping for MySQL statement

[Matthew Crouch]

I'm doing a data migration and used gnumeric to change some big
spreadsheets into .csv files for upload into a MySQL database through php.

It seems to have done fine on my local machine, but it is dying on the
production dB when it encounters a single
quote, e.g. "The Manufacturer's specification ..."
Right there------------------^

magicquotes is On
Is there a handy extra function that can improves a string's chances of
getting into MySQL cleanly?

The setting for the csv export was "Always" (escape-quote everything)

[Matthew Crouch]

Found this fxn and am trying it out. All advice/stories of your
experiences are appreciated

[knoak]

mysql_escape_string($sting); ?

Maybe i'm wrong, because i'm a noob,
in that case, my apologies.

[odalcet]

According to PHP docs:

"Note: This function has been deprecated since PHP 4.3.0. Do not use
this function. Use mysql_real_escape_string() instead. "

http://ve.php.net/manual/en/function...ape-string.php

[odalcet]

According to PHP docs:

"Note: This function has been deprecated since PHP 4.3.0. Do not use
this function. Use mysql_real_escape_string() instead. "

http://ve.php.net/manual/en/function...ape-string.php

[knoak]

Well, i've got a lttle problem with that:
When i base queries upon parameters in the url,
i use mysql_escape_string(), becaus real_escape
gives me an error.

When i run a script to load some data into the DB,
(all serverside) i CAN use mysql_real_escape_string()
without an error.

Any clue?

[Michael Fesser]

.oO(knoak)

Well, i've got a lttle problem with that:
When i base queries upon parameters in the url,
i use mysql_escape_string(), becaus real_escape
gives me an error.

What error?

Micha