special chars in mysql query

[eluser]timchase01[/eluser]
First I would suggest using active record instead of running the query directly. If you have to run the query directly though you can escape the special characters. http://ellislab.com/codeigniter/user-gui...eries.html Look for the bit on Escaping Queries, or you can use the data bindings, which is much better from a security standpoint.