Inserting Data into a MS SQL Database from a PHP form

[fredb]

I am trying to store a last name that contains an apostrophe (O'Merle). It appears that PHP is adding a '\' to the last name (O\'Merle). The back slash is causing a SQL error.

The last name is entered from a PHP form and is retrieved using $_POST. Is there away to keep the apostrophe or single quote and get rid of the back slash?

lastname = [ O\'Merle ]
Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][SQL Native Client][SQL Server]Incorrect syntax near 'Merle'., SQL state 37000 in SQLExecDirect

Thanks.
Fred Bernstein

[cassbiz]

I am trying to store a last name that contains an apostrophe (O'Merle). It appears that PHP is adding a '\' to the last name (O\'Merle). The back slash is causing a SQL error.

The last name is entered from a PHP form and is retrieved using $_POST. Is there away to keep the apostrophe or single quote and get rid of the back slash?

lastname = [ O\'Merle ]
Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][SQL Native Client][SQL Server]Incorrect syntax near 'Merle'., SQL state 37000 in SQLExecDirect

Thanks.
Fred Bernstein

You will need to use stripslashes() in order to get rid of the backslashes

[php]
echo stripslashes($row['lastname']);
[/php]

[iburyak]

I am trying to store a last name that contains an apostrophe (O'Merle). It appears that PHP is adding a '\' to the last name (O\'Merle). The back slash is causing a SQL error.

The last name is entered from a PHP form and is retrieved using $_POST. Is there away to keep the apostrophe or single quote and get rid of the back slash?

lastname = [ O\'Merle ]
Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][SQL Native Client][SQL Server]Incorrect syntax near 'Merle'., SQL state 37000 in SQLExecDirect

Thanks.
Fred Bernstein

If you'll double an apostrophe problem will go away. Not double quote.

[PHP]O''Merle[/PHP]

[fredb]

If you'll double an apostrophe problem will go away. Not double quote.

[PHP]O''Merle[/PHP]

The double single quote helped get the record into the SQL server database. The approach that I had to take is as follows:

$lname = $_POST['lastname'];

// Remove backslash
$lastname = preg_replace('/[\\\]/','',$lname);
// Add another apostrophe (single quote)
$lastname = preg_replace('/[\']/','\'\'',$lastname);

I appreciate your help. Take care.
Fred

[Motoma]

Sounds like a magic_quotes_gpc problem: this link discusses the issue, and has a very nice work around.