On 1.3.2006 23:18 Nigel Weeks wrote:

> $surname = str_replace("'","''",$surname);
> $firstname = str_replace("'","''",$firstname);

Sometimes I'm using:

function FixIt($data)
{
return str_replace("'", "''", stripslashes($data));
}

the stripslashes function also removes the \ char, which is good for
MySQL, etc. and the default configuration of PHP uses it.

--
Jiri Cincura
http://www.cincura.net/