Hello. I am writing a website with data entry into the mysql database via the html form using php.
There was a problem with the preservation and subsequent output of strings containing quotation marks ('and ").
Strings are not saved to the database, when escaping quotes (addslashes () function) are saved, but not displayed.
Here is the code for the input page entry field:

echo '< input type="text" size="20" name="tender1" value="" />';

Code field code after editing:

 echo '< input type="text" size="20" name="tender1" value="'.$_REQUEST['tender1'].'" />';

Save codes to database (add and edit):

 mysql_query('INSERT INTO tenders (`tender1`) VALUES ("'.$_REQUEST['tender1'].'")'); mysql_query('UPDATE `tenders` SET `tender1`="'.$_REQUEST['tender1'].'"');

Output code from database:

 $mysql_array_tenders = mysql_fetch_array(mysql_query('SELECT * FROM `tenders`),0); echo '< input type="text" size="20" name="tender1" value="'.$mysql_array_tenders['tender1'].'" />';

Tell me how to change the code so that when saving and displaying strings containing quotation marks ('and') there are no problems.

    1 answer 1

    Process incoming data using mysql_real_escape_string

     mysql_query('INSERT INTO tenders (`tender1`) VALUES ("'.mysql_real_escape_string($_REQUEST['tender1']).'")');