Ken Wills wrote:

> Hi!
>
> I have an annoying problem, that I just haven't been able to get around yet. When I 
>parse the
> input from a form and go to insert it eveything works fine as long as the user 
>doesn't use
> the ' character in the input. I've tried using qw{} and qq{}, which either don't 
>interpolate
> or give me errors. Anyone have any suggestions? Postgres 6.4, Apache 1.3, mod_perl 
>1.16.
> The insert statement is below.
>
> my $query_string=qq{INSERT INTO CALLS (ca_service_id, ca_org_name, ca_phone_number, 
>ca_status,
> ca_product, ca_problem, ca_resolution, ca_contact_name, ca_assigned, ca_date) VALUES 
>('$service_id',
> '$org_name', '$phone_number', '$status', '$product', '$problem', '$resolution', 
>'$contact',
> '$assigned', '$time_now')};
>

I have the same problem with DB2. I encode the ' character as &39 or 0x39. Then on 
output I reparse the
field and display the results. (I also encode the & character or whatever I use to 
delimit the
character.)


--
Bill Cunningham
Database Development Project Lead
Bally Systems



Reply via email to