û·¨ÁË mysql²åÈëhtmlÎÊÌâ

$chat_content=$player[p_name]."ÏòÊÀÈËչʾÁË <a class=\"display_item\" onclick=\"item_tips(this)\" title=\"$item_tips\">".$item[item_name]." </a>";

$item_tipsÊÇÒ»´ó¶ÎµÄhtml´úÂë

´íÎóÌáʾ
the right syntax to use near 'class="display_item" onclick="item_tips(this)" title="&lt;table style='border: m' at line 1 mysql error number: 1064

Ó¦¸ÃÖ¸µÄÊÇÀïÃ溬Óе¥ÒýºÅ' Èç¹ûÈ¥µôtitle=\"$item_tips\" ¾Í¿ÉÒÔ²åÈë

ÄÇÎÒÏÖÔÚÒªÔõôÑù²ÅÄܲåÈëÕâ¶Îhtml´úÂë ÓÃÁËhtmlentitiesºÍhtmlspecialchars¶¼²»¹ÜÓÃ

¼±

$sql="insert into ks_chat (chat_readname,chat_content) values ('ÊÀ½ç',$chat_content)"£»
¼±

---

תÒåÓÃ/£¬
or use µ¥ÒýÀ´½â¾ö£¡

---

function remSpecialChars($string) {
$string = stripslashes($string);
$string = eregi_replace("'","&#039;",$string);
$string = eregi_replace('"','&quot;',$string);
return $string;
}

function addSpecialChars($string) {
// $string = htmlspecialchars($string);
$string = eregi_replace("&#039;","'",$string);
$string = eregi_replace('&quot;','"',$string);
return $string;
}

---

·¹ý£¬Ñ§Ï°