I'm getting a bit puzzled by this. We have a mentor system so that the teachers can add mentor sessions, concerns and follow up data. This has been sent to us from another school and I have adapted it to our needs.
If they add a concern that contains quotes (' or ") it throws a wobbly and the following error appears
I have a copy of this system on my computer and do not get this error. My guess is it's something to do with the configuration of php/MySQL somewhere but I have no idea where to start.
Query INSERT INTO tutorial_data (student_id, tutorial_date, teacher_id, details) VALUES ('9990', now(), 'admin', ';'' )
Result You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '';'' )' at line 2
Works fine without quotes so it's getting stuck with not escaping the characters correctly.
Can someone point me in the right direction on this as web coding is not a strong point of mine.