how to remove a single quote ' in the search string...since it would generate an error if single quote is included...
example, in an input box, the search string below are typed
'computer
computer'
'c'o'm'p'u't'e'r
if search button is click it would generate an error...
please help..thanks...
You can try
$clean_string = str_replace("'","",$search_string);parameter 1, is what you are searching for, param 2 is what to replace it with, (in this case replace a single ' with nothing) and param 3 is the string you are searching through.
try this
$string = addslashes($seachKeyWord);
mysql_real_escape_string() is very useful for this type of SQL injection. Refer this http://www.w3schools.com/php/func_mysql_real_escape_string.asp
problem solved..thanks
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.