How to escape apostrophe in MySql

Question

The MySQL documentation says that it should be     However  both scite and mysql shows that    works   I saw that and it works  What should I do

User · Answer

Replace the string   value   value replace    g            where value is your string which is going to store in your Database      Further       NPM package for this  you can have look into it   https   www npmjs com package mysql-apostrophe

User · Answer

I think if you have any data point with apostrophe you can add one apostrophe before the apostrophe  eg   This is John s place   Here MYSQL  assumes two sentence  This is John   s place   You can put  This is John  s place   I think it should work that way

User · Answer

In PHP I like using mysqli real escape string   which escapes special characters in a string for use in an SQL statement   see https   www php net manual en mysqli real-escape-string php

User · Answer

Standard SQL uses doubled-up quotes  MySQL has to accept that to be reasonably compliant    He said   Don  t

User · Answer

The MySQL documentation you cite actually says a little bit more than you mention   It also says       A         inside a string quoted with         may be written as               Also  you linked to the MySQL 5 0 version of Table 8 1  Special Character Escape Sequences  and the current version is 5 6     but the current Table 8 1  Special Character Escape Sequences looks pretty similar    I think the Postgres note on the backslash quote  string  parameter is informative      This controls whether a quote mark can be represented by    in a string literal  The preferred  SQL-standard way to represent a quote mark is by doubling it      but PostgreSQL has historically also accepted     However  use of    creates security risks      That says to me that using a doubled single-quote character is a better overall and long-term choice than using a backslash to escape the single-quote   Now if you also want to add choice of language  choice of SQL database and its non-standard quirks  and choice of query framework to the equation  then you might end up with a different choice  You don t give much information about your constraints

User · Answer

There are three ways I am aware of  The first not being the prettiest and the second being the common way in most programming languages    Use another single quote   I mustn  t sin   Use the escape character   before the single quote    I mustn  t sin   Use double quotes to enclose string instead of single quotes   I mustn t sin

User · Answer

What I believe user2087510 meant was   name    something  name   name replace               I have also used this with success

User · Answer

Here s an example   SELECT   FROM pubs WHERE name LIKE   John s     Just use double quotes to enclose the single quote   If you insist in using single quotes  and the need to escape the character    SELECT   FROM pubs WHERE name LIKE   John  s

User · Answer

Possibly off-topic  but maybe you came here looking for a way to sanitise text input from an HTML form  so that when a user inputs the apostrophe character  it doesn t throw an error when you try to write the text to an SQL-based table in a DB  There are a couple of ways to do this  and you might want to read about SQL injection too  Here s an example of using prepared statements and bound parameters in PHP   input str    quot Here s a string with some apostrophes     quot      sanitise it before writing to the DB  assumes PDO   sql    quot INSERT INTO  table    note   VALUES   note  quot   try        stmt    dbh- gt prepare  sql        stmt- gt bindParam   note    input str  PDO  PARAM STR        stmt- gt execute      catch  PDOException  e        return  dbh- gt errorInfo      return  quot success quot    In the special case where you may want to store your apostrophes using their HTML entity references  PHP has the htmlspecialchars   function which will convert them to  amp  039   As the comments indicate  this should not be used as a substitute for proper sanitisation  as per the example given

User · Answer

just write    in place of   i mean two times

[mysql] How to escape apostrophe (') in MySql?

Examples related to mysql

Examples related to escaping