Insert a value containing single quotes in MySQL

Question

How do I insert a value in MySQL that consist of single or double quotes. i.e

Ali said, "This is Ashok's Pen."

The single quote will create problems. There might be other escape characters.

I am using php to enter data into the database?

How do you insert the data properly?

read [mysql_real_escape_string](http://php.net/manual/en/function.mysql-real-escape-string.php) — Saty, Nov 16 '15 at 12:20
You need to escape it somehow. Use mysqli_real_escape_string or even better PDO and prepared statements. — Kostas Mitsarakis, Nov 16 '15 at 12:20
*"I am using php to enter data into the database?"* - I don't know, are you?? show your code for the SQL. — Funk Forty Niner, Nov 16 '15 at 12:22

score 2 · Accepted Answer · edited Jan 24 '22 at 12:10

2

You need to use \ (Escape) character to insert single quotes and double quotes.

INSERT INTO table_name(`clomn1`) VALUES ('Ali said, "This is Ashok\'s Pen."')

edited Jan 24 '22 at 12:10

Dharman

answered Nov 16 '15 at 12:23

Subin Chalil

What's with the escaping of commas and double quptes? – Jonnix Nov 16 '15 at 12:24
You need to use \ (Escape) character to insert single quotes and double quotes. – Subin Chalil Nov 16 '15 at 12:32
First that doesn't explain the comma, second, that applies to quotes of the same kind as the encapsulation, not of every quote available. – Jonnix Nov 16 '15 at 12:33
You need to use \ (Escape) character to insert single quotes and double quotes also to insert comma as well. `single quotes and double quotes` is what OP want. – Subin Chalil Nov 16 '15 at 12:37
No you don't. You need it for the `'` in `Ashok\'s`, but that's it. – Jonnix Nov 16 '15 at 12:38
Thanks for the info.. I have edited – Subin Chalil Nov 16 '15 at 12:42

Sanjay Kumar N S · Answer 2 · 2015-11-16T12:23:32.643

1

Use mysqli_real_escape_string() mysqli_real_escape_string

edited Nov 16 '15 at 12:23

answered Nov 16 '15 at 12:20

Sanjay Kumar N S

Manual: This extension was deprecated in PHP 5.5.0, and it was removed in PHP 7.0.0. Instead, the MySQLi or PDO_MySQL extension should be used. It wasn't my downvote though. – Kostas Mitsarakis Nov 16 '15 at 12:22
@Kostas Mitsarakis Yes you are correct. edited with mysqli_real_escape_string – Sanjay Kumar N S Nov 16 '15 at 12:24

2 Answers2