escaping illegal characters for MySQL with perl

I'm a newbie...

coded a little perl script to post form data to MySQL database. I'm wondering if I need to add any perl code to the posted data that will escape any illegal characters before it gets written to the database. Is there standard code already written for this purpose? Sorry if this has been covered. i searched and didn't come up with anything.

thanks!

I assume that your using DBI to access the db. Try using DBI's $dbh ->quote();, or use place holders.

Mickalo

Yes, you should always use dbi and the quote() or place holders method. If you're using something other then dbi (first of all, you'd be a fool ), you could just use a regex to do it (note: all this does it backtick '):

Thanks for the replies. Unfortunately I'm not 100% sure how this works, and can't seem to find more information on it's use. Do you just re-assign the variable like this, or is it different?

$var = "big mamma's house";
$var = $dbh->quote($var);

Thanks again!

Rory

Yes, that is the correct usage.