The apostrophe bug: Somewhere in the mysql - DBI - DBD - perl implementation there is a bug with apostrophes. If your CGI script passes a field with an apostrophe, the SQL statement blows off. Here is a set of code to correct the error:

&NameValue; &CreateFORM; # this fixes the apostrophe bug while (($hashkey,$hashvalue) = each %FORM) { $hashvalue =~ s/'/''/g; $FORM{$hashkey}=$hashvalue; }#while # And for kicks, here's a routine to create the name-value pairs and # the hash %FORM: sub CreateFORM { foreach $pair (@pairs){ ($name, $value) = split(/=/, $pair); $value =~ tr/+/ /; $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; $name =~ tr/+/ /;<br> $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; $FORM{$name} .= "\," if (defined($FORM{$name})); $FORM{$name} .= $value; } } sub NameValue { if ($ENV{'QUERY_STRING'} ) { # Split the name-value pairs @pairs = split(/&/, $ENV{'QUERY_STRING'}); } elsif ($ENV{'REQUEST_METHOD'} eq 'POST') { # Get the input read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'}); # Split the name-value pairs @pairs = split(/&/, $buffer); } }

More MySQL