how to escape string before use in query

Question

how to escape this string

$sql = 'LOAD DATA LOCAL INFILE "C:\\xampp\\htdocs\\test\\import-excel\\book1.csv\\" INTO TABLE exam FIELDS TERMINATED BY  "," ';

because path to file will be a variable i don't know how to escape the path before use it in query , i used phpmyadmin ( create php code ) and it's gave me escaped string so i can use that , i hope someone can tell me about what function phpmyadmin use to generate this string from orginal string

$sql = "\'LOAD DATA LOCAL INFILE \"C:\\\\xampp\\\\htdocs\\\\test\\\\import-excel\\\\book1.csv\\\\\" INTO TABLE exam FIELDS TERMINATED BY \",\" \';";

tanks

What string? The one that starts with $sql? The one that starts with LOAD DATA? Or the one that starts with C:\\xampp? — JW.
– JW., Commented Jan 8, 2011 at 18:17

Sarwar Erfan · Accepted Answer · 2011-01-08 17:35:20Z

1

http://php.net/manual/en/function.mysql-escape-string.php

answered Jan 8, 2011 at 17:35

Sarwar Erfan

18.1k5 gold badges48 silver badges57 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

mehdi Over a year ago

i have use it already but it's gave me this error : LOAD DATA LOCAL INFILE \"C:\\xampp\\htdocs\\test\\import-excel\\book1.csv\\\" INTO TABLE exam FIELDS TERMINATED BY \",\" Errormessage: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"C:\\xampp\\htdocs\\test\\import-excel\\book1.csv\\\" INTO TABLE exam FIELDS TE' at line 1

Collectives™ on Stack Overflow

how to escape string before use in query

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related