Using " in a database?

Question

i have the following code in PHP:

case 'modifica':
$cerere_sql='UPDATE `pages` SET continut="'.$_POST['scris'].'" WHERE sectiune="'.$_POST['page'].'"';
//$cerere_sql='INSERT INTO `pages` (`Contact`) VALUES ("'.$_POST['scris'].'")';
mysql_query($cerere_sql);
echo '

Pagina a fost modificata cu Succes!';
break;

everithing works greate, except that wen I try to write " this won't get modified in my database. (when scris...from $_POST['scris'] has " in the text)why? and how can I write that?

Answer 1

Have you tried using regexp in PHP to escape the " with a \ before the variable makes it's way into your query?

Answer 2

Well, just take the " out!!