[phpesp-dev] [ phpesp-Bugs-783745 ] single quote breaks "add survey"

[SourceForge.net <no...@so...>]

Bugs item #783745, was opened at 2003-08-05 15:32
Message generated for change (Comment added) made by greggmc
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=783745&group_id=8956

Category: SQL
Group: v1.6.1
Status: Open
Resolution: None
Priority: 5
Submitted By: Stephen Lawrence (logart)
Assigned to: Nobody/Anonymous (nobody)
Summary: single quote breaks "add survey"

Initial Comment:
If I enter a single quote in either the name, title,
subtitle, etc. I get errors from the single quote being
in the insert statement.


[ Warning, error encountered. [ 1064: You have an error
in your SQL syntax. Check the manual that corresponds
to your MySQL server version for the right syntax to
use near 'asdfasdf'', email='', theme='',
thanks_page='', thank_head='', ] ]

thanks

----------------------------------------------------------------------

>Comment By: Matthew Gregg (greggmc)
Date: 2003-08-05 17:58

Message:
Logged In: YES 
user_id=14116

What version of ESP are you using?  Are magic quotes turned
on or off in php?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=783745&group_id=8956