[abtimoteo]

1. Is there a special way to parse form input containing single quotes for MySQL?

2. My scripts have been able to parse input with single quotes for STDOUT and the mail. But strings with single quotes can not be written to a MySQL database.

3. Thanks in advance!

[ser]

Try to use $dbh->quote() as shown in example

Code:

#!/usr/bin/perl

  use strict;
  use DBI();

  my $dbh = DBI->connect("DBI:mysql:database=test;host=localhost",
                         "user", "password",
                         {'RaiseError' => 1});
[skipped]

  $dbh->do("INSERT INTO foo VALUES (1, " . $dbh->quote($string_with_quotes) . ")");

  $dbh->disconnect();

You also can replace '(single quote) with '' (two single quotes), or \' if your mysql support it.