I’m having a problem using $wbdb. When I insert or update data using $wpdb->insert or $wpdb->update, the SQL injection protection actually inserts the ‘ into the database, and when outputting that information it has the SQL escape with it. (ie: My Value’s Escaped).
I know there’s gotta be a way to escape this using a wordpress function, but I haven’t been able to find it searching google and the wordpress codex. …So what’s that function, or what am I doing wrong (seems like the ” shouldn’t really get to the database in the first place) Thanks!
It looks as if
magic_quotesare enabled on the server you are using.There are a number of SO questions and answers that deal with what they are, why they’re bad, and how to get rid of them, so I won’t explicitly explain here, but suggest you look at a few of the following: