blocks|key|4853917|text|简单地说：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4853918|SELECT+'This+is+Ashok''s+Pen.';|offset|length|style|CODE|4853919|因此，在字符串中，将每个单引号替换为其中的两个引号。|4853920|或者：|4853921|SELECT+'This+is+Ashok\'s+Pen.'|4853922|转义=)|4853923|entityMap^0|0|0|V|0|0|0|0|U|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@$D|T|E|U|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|V|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|W|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|X|8|@$D|Y|E|Z|F|G]]|9|@]|A|$]]|$1|N|3|O|5|6|7|10|8|@]|9|@]|A|$]]|$1|P|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|Q|$]]

Put quite simply:

<code>SELECT 'This is Ashok''s Pen.';</code>

So inside the string, replace each single quote with two of them.

Or:

<code>SELECT 'This is Ashok\'s Pen.'</code>

Escape it =)

blocks|key|4853888|text|‘是转义字符。所以你的字符串应该是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4853889|4853890|这是阿肖克的笔|blockquote|4853891|4853892|4853893|如果您使用的是一些前端代码，则需要在将数据发送到存储过程之前进行字符串替换。|4853894|例如，在C#中，您可以这样做|4853895|value+=+value.Replace("'",+"''");|code-block|syntax|javascript|4853896|然后将值传递给存储过程。|4853897|entityMap^0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|V|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|W|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|X|8|@]|9|@]|A|$]]|$1|G|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|Z|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|10|8|@]|9|@]|A|$]]|$1|L|3|M|5|N|7|11|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|12|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|T|$]]

' is the escape character. So your string should be:

<blockquote>
 This is Ashok''s Pen
</blockquote>

If you are using some front-end code, you need to do a string replace before sending the data to the stored procedure.

For example, in C# you can do 

<pre><code>value = value.Replace("'", "''");
</code></pre>

and then pass value to the stored procedure.

blocks|key|1261218|text|请参阅我对"How+to+escape+characters+in+MySQL"的回答|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1261219|无论你使用什么库与MySQL对话，都会有一个内置的转义函数，例如，在PHP语言中，你可以使用mysqli_real_escape_string或PDO::quote|1261220|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/881194/how-to-escape-special-character-in-mysql/881208#881208|1|http://php.net/mysqli_real_escape_string|2|http://php.net/manual/en/pdo.quote.php^0|5|Z|0|0|1A|P|1|20|A|2|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]|$A|Z|B|10|1|11]]|C|$]]|$1|F|3|-4|5|6|7|12|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]|P|$5|I|J|K|C|$L|Q]]]]

See my answer to <a href="https://stackoverflow.com/questions/881194/how-to-escape-special-character-in-mysql/881208#881208">"How to escape characters in MySQL"</a>

Whatever library you are using to talk to MySQL will have an escaping function built in, e.g. in PHP you could use <a href="http://php.net/mysqli_real_escape_string" rel="nofollow noreferrer">mysqli_real_escape_string</a> or <a href="http://php.net/manual/en/pdo.quote.php" rel="nofollow noreferrer">PDO::quote</a>

blocks|key|4009112|text|使用以下代码：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4009113|<?php
++++$var+=+"This+is+Ashok's+Pen.";

++++mysql_real_escape_string($var);
?>|code-block|syntax|javascript|4009114|这将解决您的问题，因为数据库无法检测字符串的特殊字符。|4009115|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Use this code:

<pre><code>&lt;?php
 $var = "This is Ashok's Pen.";

 mysql_real_escape_string($var);
?&gt;
</code></pre>

This will solve your problem, because the database can't detect the special characters of a string.

blocks|key|4854064|text|如果使用预准备语句，驱动程序将处理任何转义。例如(Java)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4854065|Connection+conn+=+DriverManager.getConnection(driverUrl);
conn.setAutoCommit(false);
PreparedStatement+prepped+=+conn.prepareStatement("INSERT+INTO+tbl(fileinfo)+VALUES(?)");
String+line+=+null;
while+((line+=+br.readLine())+!=+null)+{
++++prepped.setString(1,+line);
++++prepped.executeQuery();
}
conn.commit();
conn.close();|code-block|syntax|javascript|4854066|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you use prepared statements, the driver will handle any escaping. For example (Java):

<pre><code>Connection conn = DriverManager.getConnection(driverUrl);
conn.setAutoCommit(false);
PreparedStatement prepped = conn.prepareStatement("INSERT INTO tbl(fileinfo) VALUES(?)");
String line = null;
while ((line = br.readLine()) != null) {
 prepped.setString(1, line);
 prepped.executeQuery();
}
conn.commit();
conn.close();
</code></pre>

blocks|key|1257560|text|还有另一种方法可以做到这一点，这可能会更安全，也可能不安全，这取决于你的观点。它需要MySQL+5.6或更高版本，因为使用了一个特定的字符串函数：FROM_BASE64。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1257561|假设您有这样一条消息要插入：|1257562|1257563|“啊，”近乎无头的尼克优雅地挥舞着手，“一件无关紧要的事情……好像我并不是真的想加入……以为我会申请，但显然我‘不满足要求’-+-”|blockquote|1257564|1257565|这个引号有一堆单引号和双引号，要插入到MySQL中将是一件很痛苦的事情。如果你从程序中插入，很容易转义引号等。但是，如果你必须把它放到SQL脚本中，你将不得不编辑文本(以转义引号)，这可能容易出错或对换行敏感，等等。|1257566|相反，您可以对文本进行base64编码，这样您就有了一个“干净”的字符串：|1257567|SWtGb0xDSWdUbVZoY214NUlFaGxZV1JzWlhOeklFNXBZMnNnZD+JGMlpXUWdZVzRnWld4bFoyRnVkQ0JvWVc1a0xDQWlZU0J0WVhS+MFpYCklnYjJZZ2JtOGdhVzF3YjNKMFlXNWpaUzRnTGlBdUlDNG+dTWFFuY3lCdWIzUWdZWE1nZEdodmRXZG9JRWtnY21WaGJHeDVJ+SGRoYm5SbApaQ0IwYnlCcWIybHVMaUF1SUM0Z0xpQlVhRzkxWj+JoMElFa25aQ0JoY0hCc2VTd2dZblYwSUdGd2NHRnlaVzUwYkhr+Z1NTQW5aRzl1SjMKUWdablZzWm1sc2JDQnlaWEYxYVhKbGJXVn+VkSE1uSUMwaUlBPT0K|1257568|关于base64编码的一些注意事项：|1257569|Base64是一种二进制编码，所以在进行编码时最好确保字符集是正确的，因为MySQL将把base64编码的字符串解码成字节，然后再解释这些字节。确保base64和MySQL在字符编码上达成一致(我推荐UTF-8)。|1257570|我已经将字符串包装成50列，以便在Stack和Overflow上具有可读性。您可以将其包装到所需的任意数量的列中(或者根本不包装)，它仍然可以工作。|unordered-list-item|1257571|1257572|现在，要将此代码加载到MySQL中：|1257573|INSERT+INTO+my_table+(text)+VALUES+(FROM_BASE64('+SWtGb0xDSWdUbVZoY214NUlFaGxZV1JzWlhOeklFNXBZMnNnZD+JGMlpXUWdZVzRnWld4bFoyRnVkQ0JvWVc1a0xDQWlZU0J0WVhS+MFpYCklnYjJZZ2JtOGdhVzF3YjNKMFlXNWpaUzRnTGlBdUlDNG+dTWFFuY3lCdWIzUWdZWE1nZEdodmRXZG9JRWtnY21WaGJHeDVJ+SGRoYm5SbApaQ0IwYnlCcWIybHVMaUF1SUM0Z0xpQlVhRzkxWj+JoMElFa25aQ0JoY0hCc2VTd2dZblYwSUdGd2NHRnlaVzUwYkhr+Z1NTQW5aRzl1SjMKUWdablZzWm1sc2JDQnlaWEYxYVhKbGJXVn+VkSE1uSUMwaUlBPT0K+'));|1257574|这将没有任何抱怨地插入，并且您不必手动转义字符串中的任何文本。|1257575|entityMap|0|LINK|mutability|MUTABLE|url|https://dev.mysql.com/doc/refman/5.6/en/string-functions.html#function_from-base64^0|21|B|21|B|0|0|0|0|0|0|0|0|0|AF|0|0|22|6|0|0|0|0|0|BY|0|0^^$0|@$1|2|3|4|5|6|7|1E|8|@$9|1F|A|1G|B|C]]|D|@$9|1H|A|1I|1|1J]]|E|$]]|$1|F|3|G|5|6|7|1K|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|1L|8|@]|D|@]|E|$]]|$1|I|3|J|5|K|7|1M|8|@]|D|@]|E|$]]|$1|L|3|-4|5|6|7|1N|8|@]|D|@]|E|$]]|$1|M|3|N|5|6|7|1O|8|@]|D|@]|E|$]]|$1|O|3|P|5|6|7|1P|8|@]|D|@]|E|$]]|$1|Q|3|R|5|6|7|1Q|8|@$9|1R|A|1S|B|C]]|D|@]|E|$]]|$1|S|3|T|5|6|7|1T|8|@]|D|@]|E|$]]|$1|U|3|V|5|6|7|1U|8|@$9|1V|A|1W|B|C]]|D|@]|E|$]]|$1|W|3|X|5|Y|7|1X|8|@]|D|@]|E|$]]|$1|Z|3|-4|5|6|7|1Y|8|@]|D|@]|E|$]]|$1|10|3|11|5|6|7|1Z|8|@]|D|@]|E|$]]|$1|12|3|13|5|6|7|20|8|@$9|21|A|22|B|C]]|D|@]|E|$]]|$1|14|3|15|5|6|7|23|8|@]|D|@]|E|$]]|$1|16|3|-4|5|6|7|24|8|@]|D|@]|E|$]]]|17|$18|$5|19|1A|1B|E|$1C|1D]]]]

There is another way to do this which may or may not be safer, depending upon your perspective. It requires MySQL 5.6 or later because of the use of a specific string function: <a href="https://dev.mysql.com/doc/refman/5.6/en/string-functions.html#function_from-base64" rel="nofollow noreferrer"><code>FROM_BASE64</code></a>.
Let's say you have this message you'd like to insert:
<blockquote>
"Ah," Nearly Headless Nick waved an elegant hand, "a matter of no importance. . . . It's not as though I really wanted to join. . . . Thought I'd apply, but apparently I 'don't fulfill requirements' -"
</blockquote>
That quote has a bunch of single- and double-quotes and would be a real pain to insert into MySQL. If you are inserting that from a program, it's easy to escape the quotes, etc. But, if you have to put that into a SQL script, you'll have to edit the text (to escape the quotes) which could be error prone or sensitive to word-wrapping, etc.
Instead, you can Base64-encode the text, so you have a &quot;clean&quot; string:
<code>SWtGb0xDSWdUbVZoY214NUlFaGxZV1JzWlhOeklFNXBZMnNnZD
JGMlpXUWdZVzRnWld4bFoyRnVkQ0JvWVc1a0xDQWlZU0J0WVhS
MFpYCklnYjJZZ2JtOGdhVzF3YjNKMFlXNWpaUzRnTGlBdUlDNG
dTWFFuY3lCdWIzUWdZWE1nZEdodmRXZG9JRWtnY21WaGJHeDVJ
SGRoYm5SbApaQ0IwYnlCcWIybHVMaUF1SUM0Z0xpQlVhRzkxWj
JoMElFa25aQ0JoY0hCc2VTd2dZblYwSUdGd2NHRnlaVzUwYkhr
Z1NTQW5aRzl1SjMKUWdablZzWm1sc2JDQnlaWEYxYVhKbGJXVn
VkSE1uSUMwaUlBPT0K
</code>
Some notes about Base64-encoding:
<ol>
<li>Base64-encoding is a binary encoding, so you'd better make sure that you get your character set correct when you do the encoding, because MySQL is going to decode the Base64-encoded string into bytes and then interpret those. Be sure <code>base64</code> and MySQL agree on what the character encoding is (I recommend UTF-8).</li>
<li>I've wrapped the string to 50 columns for readability on Stack Overflow. You can wrap it to any number of columns you want (or not wrap at all) and it will still work.</li>
</ol>
Now, to load this into MySQL:
<code>INSERT INTO my_table (text) VALUES (FROM_BASE64('
SWtGb0xDSWdUbVZoY214NUlFaGxZV1JzWlhOeklFNXBZMnNnZD
JGMlpXUWdZVzRnWld4bFoyRnVkQ0JvWVc1a0xDQWlZU0J0WVhS
MFpYCklnYjJZZ2JtOGdhVzF3YjNKMFlXNWpaUzRnTGlBdUlDNG
dTWFFuY3lCdWIzUWdZWE1nZEdodmRXZG9JRWtnY21WaGJHeDVJ
SGRoYm5SbApaQ0IwYnlCcWIybHVMaUF1SUM0Z0xpQlVhRzkxWj
JoMElFa25aQ0JoY0hCc2VTd2dZblYwSUdGd2NHRnlaVzUwYkhr
Z1NTQW5aRzl1SjMKUWdablZzWm1sc2JDQnlaWEYxYVhKbGJXVn
VkSE1uSUMwaUlBPT0K
'));
</code>
This will insert without any complaints, and you didn't have to manually-escape any text inside the string.

blocks|key|4853974|text|您应该使用\字符对特殊字符进行转义。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4853975|This+is+Ashok's+Pen.|code-block|syntax|javascript|4853976|变成：|4853977|This+is+Ashok\'s+Pen.|4853978|entityMap^0|5|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|P|$]]

You should escape the special characters using the <code>\</code> character.

<pre><code>This is Ashok's Pen.
</code></pre>

Becomes:

<pre><code>This is Ashok\'s Pen.
</code></pre>

blocks|key|4854416|text|如果您希望在数据库中保留(')撇号，请使用以下代码：|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|CODE|entityRanges|data|4854417|$new_value+=+str_replace("'","\'",+$value);+|code-block|syntax|javascript|4854418|$new_value可以存储在数据库中。|4854419|entityMap^0|C|3|C|3|0|0|0|A|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]|$9|S|A|T|B|D]]|E|@]|F|$]]|$1|G|3|H|5|I|7|U|8|@]|E|@]|F|$J|K]]|$1|L|3|M|5|6|7|V|8|@$9|W|A|X|B|D]]|E|@]|F|$]]|$1|N|3|-4|5|6|7|Y|8|@]|E|@]|F|$]]]|O|$]]

If you want to keep <code>(')</code> apostrophe in the database use this below code:
<pre><code>$new_value = str_replace(&quot;'&quot;,&quot;\'&quot;, $value); 
</code></pre>
<code>$new_value</code> can store in database.

blocks|key|4009010|text|在PHP中，使用mysqli_real_escape_string。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4009011|PHP手册中的示例：|4009012|<?php
$link+=+mysqli_connect("localhost",+"my_user",+"my_password",+"world");

/*+check+connection+*/
if+(mysqli_connect_errno())+{
++++printf("Connect+failed:+%25s\n",+mysqli_connect_error());
++++exit();
}

mysqli_query($link,+"CREATE+TEMPORARY+TABLE+myCity+LIKE+City");

$city+=+"'s+Hertogenbosch";

/*+this+query+will+fail,+cause+we+didn't+escape+$city+*/
if+(!mysqli_query($link,+"INSERT+into+myCity+(Name)+VALUES+('$city')"))+{
++++printf("Error:+%25s\n",+mysqli_sqlstate($link));
}

$city+=+mysqli_real_escape_string($link,+$city);

/*+this+query+with+escaped+$city+will+work+*/
if+(mysqli_query($link,+"INSERT+into+myCity+(Name)+VALUES+('$city')"))+{
++++printf("%25d+Row+inserted.\n",+mysqli_affected_rows($link));
}

mysqli_close($link);
?>|code-block|syntax|javascript|4009013|entityMap|0|LINK|mutability|MUTABLE|url|https://www.php.net/manual/en/mysqli.real-escape-string.php^0|8|P|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|C|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

In PHP, use <a href="https://www.php.net/manual/en/mysqli.real-escape-string.php" rel="nofollow noreferrer">mysqli_real_escape_string</a>.

Example from the PHP Manual:

<pre><code>&lt;?php
$link = mysqli_connect("localhost", "my_user", "my_password", "world");

/* check connection */
if (mysqli_connect_errno()) {
 printf("Connect failed: %s\n", mysqli_connect_error());
 exit();
}

mysqli_query($link, "CREATE TEMPORARY TABLE myCity LIKE City");

$city = "'s Hertogenbosch";

/* this query will fail, cause we didn't escape $city */
if (!mysqli_query($link, "INSERT into myCity (Name) VALUES ('$city')")) {
 printf("Error: %s\n", mysqli_sqlstate($link));
}

$city = mysqli_real_escape_string($link, $city);

/* this query with escaped $city will work */
if (mysqli_query($link, "INSERT into myCity (Name) VALUES ('$city')")) {
 printf("%d Row inserted.\n", mysqli_affected_rows($link));
}

mysqli_close($link);
?&gt;
</code></pre>

blocks|key|1261495|text|你可以使用下面的代码，|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1261496|<?php
+++++$var+=+"This+is+Ashok's+Pen.";
+++++addslashes($var);
?>|code-block|syntax|javascript|1261497|如果mysqli_real_escape_string()不起作用。|1261498|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can use this code,

<pre><code>&lt;?php
 $var = "This is Ashok's Pen.";
 addslashes($var);
?&gt;
</code></pre>

if mysqli_real_escape_string() does not work.

blocks|key|1257466|text|如果您使用的是PHP，只需使用addslashes()函数。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1257467|PHP+Manual+addslashes|offset|length|1257468|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/addslashes^0|0|0|L|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

If you are using PHP, just use the addslashes() function.

<a href="http://www.php.net/addslashes" rel="nofollow noreferrer">PHP Manual addslashes</a>

blocks|key|4854244|text|$var+=+mysqli_real_escape_string($conn,+$_POST['varfield']);|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|4854245|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>$var = mysqli_real_escape_string($conn, $_POST['varfield']);
</code></pre>

blocks|key|790272|text|对于编程访问，可以使用placeholders自动转义不安全字符。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|790273|例如，在Perl+DBI中，您可以使用：|790274|my+$string+=+"This+is+Ashok's+pen";
$dbh->do("insert+into+my_table(my_string)+values(?)",undef,($string));+|code-block|syntax|javascript|790275|entityMap|0|LINK|mutability|MUTABLE|url|http://web.archive.org/web/20051218150351/http://www.geekuprising.com/create_better_perl_and_sql_with_placeholders^0|B|C|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|C|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

For programmatic access, you can use <a href="http://web.archive.org/web/20051218150351/http://www.geekuprising.com/create_better_perl_and_sql_with_placeholders" rel="nofollow">placeholders</a> to automatically escape unsafe characters for you. 

In Perl DBI, for example, you can use:

<pre><code>my $string = "This is Ashok's pen";
$dbh-&gt;do("insert into my_table(my_string) values(?)",undef,($string)); 
</code></pre>

blocks|key|4009147|text|也许你可以看看MySQL手册中的function+QUOTE。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4009148|entityMap|0|LINK|mutability|MUTABLE|url|http://dev.mysql.com/doc/refman/5.7/en/string-functions.html#function_quote^0|P|5|P|5|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]]|D|@$9|Q|A|R|1|S]]|E|$]]|$1|F|3|-4|5|6|7|T|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]]]

Maybe you could take a look at function <a href="http://dev.mysql.com/doc/refman/5.7/en/string-functions.html#function_quote" rel="nofollow noreferrer"><code>QUOTE</code></a> in the MySQL manual.

blocks|key|4009227|text|我使用Delphi的方式：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4009228|TheString+to+"escape"：|4009229|TheString="+bla+bla+bla+'em+some+more+apo:S+'em+and+so+on+";|code-block|syntax|javascript|4009230|解决方案：|4009231|StringReplace(TheString,+#39,'\'%2B#39,+[rfReplaceAll,+rfIgnoreCase]);|4009232|结果：|4009233|TheString="+bla+bla+bla+\'em+some+more+apo:S+\'em+and+so+on+";|4009234|此函数将所有字符(39)替换为"\'“，允许您在MySQL中插入或更新文本字段而不会出现任何问题。|4009235|在所有编程语言中都可以找到类似的函数！|4009236|entityMap^0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|Z|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|10|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|11|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|12|8|@]|9|@]|A|$G|H]]|$1|Q|3|R|5|6|7|13|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|14|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|V|$]]

The way I do, by using Delphi:

TheString to "escape":

<pre><code>TheString=" bla bla bla 'em some more apo:S 'em and so on ";
</code></pre>

Solution:

<pre><code>StringReplace(TheString, #39,'\'+#39, [rfReplaceAll, rfIgnoreCase]);
</code></pre>

Result:

<pre><code>TheString=" bla bla bla \'em some more apo:S \'em and so on ";
</code></pre>

This function will replace all Char(39) with "\'" allowing you to insert or update text fields in MySQL without any problem.

Similar functions are found in all programming languages!

blocks|key|1257622|text|可以使用addslahes()或mysql_real_escape_string()。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1257623|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Use either addslahes() or mysql_real_escape_string().

blocks|key|4009479|text|这是我的数据作为API响应的样子，我希望将其存储在MYSQL数据库中。它包含引号、HTML代码等。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4009480|示例：-|4009481|{

rewardName:+"Cabela's+eGiftCard+$25.00",

shortDescription:+'adidas+gift+cards+can+be+redeemed+in+over+150+adidas+Sport+Performance,+adidas+Originals,+or+adidas+Outlet+stores+in+the+US,+as+well+as+online+at&nbsp;<a+href="http://adidas.com/">adidas.com</a>.

terms:+'adidas+Gift+Cards+may+be+redeemed+for+merchandise+on&nbsp;<a+href="http://adidas.com/">adidas.com</a>&nbsp;and+in+adidas+Sport+Performance,+adidas+Originals,+and+adidas+Outlet+stores+in+the+United+States.'

}|code-block|syntax|javascript|4009482|解决方案|4009483|CREATE+TABLE+`brand`+(
`reward_name`+varchar(2048),
`short_description`+varchar(2048),
`terms`+varchar(2048),++
)+ENGINE=InnoDB+AUTO_INCREMENT=6+DEFAULT+CHARSET=latin1;|4009484|在插入时，In跟随JSON.stringify()|offset|length|style|BOLD|4009485|++++let+brandDetails=+{
++++rewardName:+JSON.stringify(obj.rewardName),++
++++shortDescription:+JSON.stringify(obj.shortDescription),
++++term:+JSON.stringify(obj.term),
+++++}|4009486|上面是JSON对象，下面是将数据插入MySQL的SQL查询。|4009487|let+query+=+`INSERT+INTO+brand+(reward_name,+short_description,+terms)+
VALUES+(${brandDetails.rewardName},+
(${brandDetails.shortDescription},+${brandDetails.terms})`;|4009488|它成功了..。|4009489|​|4009490|📷|atomic|4009491|4009492|如果什么都不起作用，请尝试这样做：|4009493|var+res+=+str.replace(/'/g,+"\\'");
var+res+=+res.replace(/"/g,+"\\\"");|4009494|它会将\转义字符添加到出现‘“的所有(每个)。”|4009495|不确定这是否是解决问题的正确/专业方法|4009496|我猜它会起作用，但在实际内容中，每个单引号和双引号都将替换为\+character|4009497|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/96366c40b580c7197b683ba525030fd8.png|imageAlt^0|0|0|0|0|0|9|G|0|0|0|0|0|0|0|1|0|0|0|0|0|E|8|0|0|0^^$0|@$1|2|3|4|5|6|7|1P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|1R|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|1S|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|1T|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|1U|8|@$O|1V|P|1W|Q|R]]|9|@]|A|$]]|$1|S|3|T|5|F|7|1X|8|@]|9|@]|A|$G|H]]|$1|U|3|V|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|W|3|X|5|F|7|1Z|8|@]|9|@]|A|$G|H]]|$1|Y|3|Z|5|6|7|20|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|21|8|@]|9|@]|A|$]]|$1|12|3|13|5|14|7|22|8|@]|9|@$O|23|P|24|1|25]]|A|$]]|$1|15|3|11|5|6|7|26|8|@]|9|@]|A|$]]|$1|16|3|17|5|6|7|27|8|@]|9|@]|A|$]]|$1|18|3|19|5|F|7|28|8|@]|9|@]|A|$G|H]]|$1|1A|3|1B|5|6|7|29|8|@$O|2A|P|2B|Q|R]]|9|@]|A|$]]|$1|1C|3|1D|5|6|7|2C|8|@]|9|@]|A|$]]|$1|1E|3|1F|5|6|7|2D|8|@]|9|@]|A|$]]|$1|1G|3|-4|5|6|7|2E|8|@]|9|@]|A|$]]]|1H|$1I|$5|1J|1K|1L|A|$1M|1N|1O|-4]]]]

This is how my data as API response looks like, which I want to store in the MYSQL database. It contains Quotes, HTML Code , etc.
Example:-
<pre><code>{

rewardName: &quot;Cabela's eGiftCard $25.00&quot;,

shortDescription: '&lt;p&gt;adidas gift cards can be redeemed in over 150 adidas Sport Performance, adidas Originals, or adidas Outlet stores in the US, as well as online at&amp;nbsp;&lt;a href=&quot;http://adidas.com/&quot;&gt;adidas.com&lt;/a&gt;.&lt;/p&gt;

terms: '&lt;p&gt;adidas Gift Cards may be redeemed for merchandise on&amp;nbsp;&lt;a href=&quot;http://adidas.com/&quot;&gt;adidas.com&lt;/a&gt;&amp;nbsp;and in adidas Sport Performance, adidas Originals, and adidas Outlet stores in the United States.'

}
</code></pre>
SOLUTION
<pre><code>CREATE TABLE `brand` (
`reward_name` varchar(2048),
`short_description` varchar(2048),
`terms` varchar(2048), 
) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=latin1;
</code></pre>
While inserting , In followed JSON.stringify()
<pre><code> let brandDetails= {
 rewardName: JSON.stringify(obj.rewardName), 
 shortDescription: JSON.stringify(obj.shortDescription),
 term: JSON.stringify(obj.term),
 }
</code></pre>
Above is the JSON object and below is the SQL Query that insert data into MySQL.
<pre><code>let query = `INSERT INTO brand (reward_name, short_description, terms) 
VALUES (${brandDetails.rewardName}, 
(${brandDetails.shortDescription}, ${brandDetails.terms})`;
</code></pre>
Its worked....
<a href="https://i.stack.imgur.com/g8Evq.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/g8Evq.png" alt="enter image description here" /></a>
If nothing works try this :
<pre><code>var res = str.replace(/'/g, &quot;\\'&quot;);
var res = res.replace(/&quot;/g, &quot;\\\&quot;&quot;);
</code></pre>
It adds the \ escape character to all(every) occurrences of ' and &quot;
Not sure if its the correct/professional way to fix the issue
I'm guessing it will work but in actual content, every single and double quotes will be replaced with \ character

blocks|key|1257663|text|作为Python用户，我将引号替换为原始的"'"：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1257664|don_not_work_str+=+"This+is+Ashok's+Pen."
work_str+=+don_not_work_str.replace("'",+r"\'")|code-block|syntax|javascript|1257665|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

As a Python user I replace the quote with a raw &quot;'&quot;:
<pre><code>don_not_work_str = &quot;This is Ashok's Pen.&quot;
work_str = don_not_work_str.replace(&quot;'&quot;, r&quot;\'&quot;)
</code></pre>

How do I insert a value in MySQL that consist of single or double quotes. i.e

<pre><code>This is Ashok's Pen.
</code></pre>

The single quote will create problems. There might be other escape characters. 

How do you insert the data properly?

How to escape single quotes in MySQL

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

EdgeOne AI 安全实战专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

如何在MySQL中插入由单引号或双引号组成的值。i.eThis is Ashok's Pen.单引号会产生问题。可能还有其他转义字符。如何正确地插入数据？

问如何在MySQL中转义单引号
EN

回答 18

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在MySQL中转义单引号EN

回答 18

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在MySQL中转义单引号
EN