PHP Error Character (HELP!)

[werks]

Hello PHP experts how can you detect ' character in your search field?
Because every time I input the word hilgard's it returns an error I think because of the character '. This is the error

Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'Title LIKE '%hilgard's%';'., SQL state 37000 in SQLExecDirect in D:\wamp\www\Online Library\opac.php on line 76
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'Title LIKE '%hilgard's%';'.
 

tnx in advance.

--
Kenneth
"Better Than Yesterday"

[dlite922]

Hello PHP experts how can you detect ' character in your search field?
Because every time I input the word hilgard's it returns an error I think because of the character '. This is the error

Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'Title LIKE '%hilgard's%';'., SQL state 37000 in SQLExecDirect in D:\wamp\www\Online Library\opac.php on line 76
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'Title LIKE '%hilgard's%';'.
 

tnx in advance.

--
Kenneth
"Better Than Yesterday"

Its about time you know about a little some'n some'n called

SQL INJECTION

http://www.google.com/search?hl=en&q=SQL+Injection

After you studied it, then do learn how to prevent it:

http://us3.php.net/manual/en/functio...ape-string.php

Only you have MS SQL and not MySQL, but you get the point.

If you're still not satisfied.

Just use string replace

http://us3.php.net/manual/en/function.str-replace.php

[PHP]

str_replace("'", "\'", $sqlString);

[/PHP]

Get it?, got it?, gooOOood!

[werks]

Thanks dlite922 I learned a lot! All the links you post is very useful. Than you very much..

--
Kenneth
"Better Than Yesterday"