php - How to correctly sanitize mssql query that stores emails -


i have query goes mailbox , tries save emails in table. works in cases fails when email content value has double or single quote marks. how modify code correctly insert queries?

    $num = imap_num_msg($imap);     if($num > 0)     {         for($b = $num; $b > 0; $b--)         {             $body = $this->get_part($imap, $b, "text/html");             if($body == "")             {                 $body = $this->get_part($imap, $b, "text/plain");             }             $header = imap_headerinfo($imap, $b);             $subject = $header->subject;             $fromaddress = $header->fromaddress;             $body = str_replace("'", "''", $body);             //$body = str_replace("\"", "\"\"", $body);             $sql3 = "insert [tbl_test] (content)                      values ('".$body."')";             $result3 = mssql_query($sql3, $dbh1);         }     }

afterwords these errors:

warning: mssql_query(): message: unclosed quotation mark after character string 'please investigate why below s....

warning: mssql_query(): general sql server error: check messages sql server (severity 15) in /var/www/testing.php on line 38

you want using parameters:

$query = "insert test (email, body) values (?,?);"; $arrparams[]="my@domain.com"; $arrparams[]="my email body has quotes\'s or double quotes \" in it."; $resource=sqlsrv_query($conn, $query, $arrparams);

source: sqlsrv_query


Comments

Post a Comment

Popular posts from this blog

monitor web browser programmatically in Android? -

i've got tricky question here. need users make payment bank (namely barclaycard) in uk. so, have https url , add parameters (such amount pay, order reference, etc) url, start http connection intent.actionview, redirect user browser can enter credit card details on bank's webpage , make payment our account successfully. far ? the code use below (i changed values privacy reasons) problem is, need app when user has completed/failed/cancelled payment. barclaycardautomatically redirects particular url when payment has succeeded, 1 if failed. there no way of knowing when barclaycard payment has succeeded go android app somehow ? button cardbutton = (button) findviewbyid(r.id.card_button); cardbutton.setonclicklistener(new view.onclicklistener() { @override public void onclick(view arg0) { string prehashstring = new string(); string prohashstring = new string(); string shapassphrase = new string(); shapassphrase = "gsvth£h70zkh...
Read more

Shrink a YouTube video to responsive width -

i have youtube video embedded on our website , when shrink screen tablet or phone sizes stops shrinking @ around 560px in width. standard youtube videos or there can add code make go smaller? you can make youtube videos responsive css. wrap iframe in div class of "videowrapper" , apply following styles: .videowrapper { float: none; clear: both; width: 100%; position: relative; padding-bottom: 56.25%; padding-top: 25px; height: 0; } .videowrapper iframe { position: absolute; top: 0; left: 0; width: 100%; height: 100%; } the .videowrapper div should inside responsive element. padding on .videowrapper necessary keep video collapsing. may have tweak numbers depending upon layout.
Read more

wpf - PdfWriter.GetInstance throws System.NullReferenceException -

i'm trying create pdf document using itextsharp 5.3.4 using following document document = new document(); filestream stm = new filestream(filename, filemode.create); pdfwriter writer = pdfwriter.getinstance(document, stm); i'm getting system.nullreferenceexception following stack trace: system.nullreferenceexception occurred hresult=-2147467261 message=la référence d'objet n'est pas définie à une instance d'un objet. source=itextsharp stacktrace: à itextsharp.text.version.getinstance() innerexception: i've verified neither document nor stm null, , if select "continue" in vs12 document created - exception thrown. updated itextsharp 5.4.0 , it's still occurring. can't find information on anywhere - got ideas? make sure not catching exceptions. nullreferenceexception can 1 caught , handled inside itextsharp, don't care it. fact can continue supports theory. change following setting verify: debug -> exceptions ...
Read more