[wangningyu]

I used the sqlx library,when insert or query the datebase with special characters, like this:

PHP Code:

        formatex(query, charsmax(query), "SELECT * FROM `Happy` WHERE (`Name` = '%s');", name)

        SQL_ThreadQuery(g_SQLTuple, "QuerySelectData", query, data, 1) 


when the name = I'm MT, it contain the ' , so it calls falied.

The premise is not replace special characters，how to fix this code with string format ?


bad for my english.

[Exolent[jNr]]

// name = player's name
new fixedName[64];
copy(fixedName, charsmax(fixedName), name);
replace_all(fixedName, charsmax(fixedName), "'", "''");

Or, you could just use ^"%s^" instead of '%s' since player names cannot contain double quotes.

[Sylwester]

You can also use SQL_QuoteString.

[wangningyu]

Originally Posted by Sylwester You can also use SQL_QuoteString.

Bad message: the greate firewall fix the url.

[wangningyu]

Originally Posted by Exolent[jNr] Code: // name = player's name new fixedName[64]; copy(fixedName, charsmax(fixedName), name); replace_all(fixedName, charsmax(fixedName), "'", "''"); Or, you could just use ^"%s^" instead of '%s' since player names cannot contain double quotes.

this means that replace the ' to '' ?

but also falied too.

[Sylwester]

Originally Posted by wangningyu Bad message: the greate firewall fix the url.

What?

[Exolent[jNr]]

Originally Posted by Exolent[jNr] use ^"%s^" instead of '%s' since player names cannot contain double quotes.

[wangningyu]

Thanks !

I used your way to wrote like this:

PHP Code:

        formatex(query, charsmax(query), "SELECT `Password`, `Status` FROM `registersystem` WHERE (`Name` = ^"%s^");", name)

        SQL_ThreadQuery(g_SQLTuple, "QuerySelectData", query, data, 1) 


It's successed !

Thanks again.