Ignore single quotes stored in a PHP variable

No its not working...I need something which can escape single quotes inside a variable. I am using PDO connection with MS SQL database.

Are you trying to escape a single quote as in " it's " ?

Yes

Oh then Hugo Paz 's answer will help you out.

I read something about PDO quote....Is this something which can be of help?

Yes you can use PDO::quote. There are a few good example here http://php.net/manual/en/pdo.quote.php

Actually i don't want ' to be converted to ' ' What i want is that ' just gets ignored while inserting it to the database. Example it i want to insert something like "Mary's Grade" in the DB it gets stored as it is.

Try this.

 $ps = $db->prepare("insert into yourTable (column) values (:yourValue)");

            $ps->bindValue(":yourValue", $var);

            $ps->execute();

This will insert single quotes on the database.

What is $var here?

Should be $val, its the value you want to insert in the database.

So what is :yourValue ?

:yourValue is a placeholder for the prepared statement.

You give the placeholder a name, like :placeholder and then you bind the value you want to that placeholder through $ps->bindValue(":yourValue", $var);

$val="here is a quote's and another's ";

Its not inserting it.

Can you post all your php code that deals with database please?

Its inserted now....Thanks....!!!

I used "$val" instead of '$val' and it worked.

Please explain with example. How can i escape it in a variable as it changes every time in my application?

I have a little problem when i bind the value for updating the row. My code is below:

$val="here is a quote's and another's hello ";

echo $val;

$db = new PDO("sqlsrv:server=(local);Database=testdb","root","****");

$ps = $db->prepare("UPDATE notes_store SET notes=:placeholder WHERE firstname='sameer' AND course_name='tiff' AND module_name='test' IF @@ROWCOUNT=0 INSERT INTO notes_store(firstname,notes) VALUES('sameer',:placeholder)");

        $ps->bindValue(":placeholder", "$val");

        $ps->execute();