single quotes (again!) in the uploaded file

[Daria]

the script below allows me to upload text file straight into the mysql table
<?
$linkID = @mysql_connect(APP_DB_HOST, APP_DB_USER, APP_DB_PASSWORD) or die('Connection to Database FAILED.' . mysql_error());
mysql_select_db(APP_DB, $linkID);
$data = file ('./textfile.txt');
for($i=0; $i<sizeof($data); $i++) {
$line = trim($data[$i], '\t');
$arr = explode("\t", $line);
$sql = "insert into table values ('". implode("','", $arr) ."')";
mysql_query($sql);
echo $sql;
if(mysql_error()) {
echo "<h1>";
echo mysql_error() ."</h1";
}
}
?>

The problem is, when my data contains a single quote, that row does not go through, as a bad syntax. So for everything that says something to the extend of Mike's Place, stalls my file.


What should I modify to make sure the data with single quotes gets proper treatment, when it is a part of the file?

[chazzy]

try using mysql_real_escape to escape the data...

[NogDog]

You might want to take a look at Example 3 on http://www.php.net/mysql_real_escape_string

[Daria]

I am not sure I understand: it will apply to the external file, not just to the input?

[chazzy]

you need to have it applied to each item as you want it applied. it works on strings.