MySQL转义单引号和双引号 [英] mysql escaping single and double quotes

问题描述

我有一个正在编写的脚本，用于将某些字段移至新的数据库，例如

I have a script that i am writing to move certain fields to a new db like

$results = mysql_query ( "SELECT body, title  FROM $source_db.Post" );
while ($row = mysql_fetch_array($results)) {
if(mysql_num_rows($users_result) > 0){
    $insert = "INSERT INTO wp_posts (`body`,`title`) VALUES ('{$row['body']}', '{$row['row']}')";
    mysql_query($insert);
    }
}

但是如您所见，由于单引号和双引号，查询每次都会中断，是否有解决此问题的方法，例如herdok或类似的东西

but as you can see the query will break everytime due to the single and double quotes, is there a solution to this problem like herdok or something

INSERT INTO wp_posts (`body`,`title`)
            VALUES
                ('Here are the final returns from today's ...<br /><br />he stayed home...<br />
<div class="entry-content">
<div class="entry-body">', 'something')

推荐答案

mysql_real_escape_string就是为此而设计的.

PHP:mysql_real_escape_string

$insert = "INSERT INTO wp_posts ('body','title') VALUES ('".mysql_real_escape_string($row['body'])."', '".mysql_real_escape_string($row['row'])."')";

这篇关于MySQL转义单引号和双引号的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！