Problems with apostrophes in my product search.

[Andy_GS]

When i type the full name of a product into the site search it seems to be fire a 1064 error:

it would appear this is because within the product name there is a ' which has subsequently knocked the mysql code. Any tips for fixing?

Andy.

*EDIT*

Version 1.3.8a

[shrimp-gumbo-mmmhhh]

Andy,

This does not happen on my 1.3.8a.... albeit I have modified my search a lot. What is the keyword you are typing in?

Shrimp

[Andy_GS]

well the thing i typed in was the exact name of a product which happens to contain an '

e.g

that's amore

will break the query because it contains an apostraphy.

Andy.

[shrimp-gumbo-mmmhhh]

will check on it

[shrimp-gumbo-mmmhhh]

Works on mine.... have you made any changes to your code?

[Andy_GS]

Hey Shrimp,

to the best of my knowledge nothing has been changed on this. Perhaps there was an update to 1.3.8a that i missed which corrected the problem ill have a look. Basicaly i either need to having somthing remove any invalid chars like ' etc. Or for these to be handled in a different way.

ill have alook see if there are any minor tweeks that may have been released.

Andy.

[shrimp-gumbo-mmmhhh]

Hey Shrimp,

to the best of my knowledge nothing has been changed on this. Perhaps there was an update to 1.3.8a that i missed which corrected the problem ill have a look. Basicaly i either need to having somthing remove any invalid chars like ' etc. Or for these to be handled in a different way.

ill have alook see if there are any minor tweeks that may have been released.

Andy.

Andy,

Checked a couple in the live showcase and they worked fine.... checked the one in this thread and it didn't work:

http://www.zen-cart.com/forum/showthread.php?t=136173

I'm supposing since none on the dev team have responded that they think something has been modified on your cart to cause this..... you can take the ' out of the keywords but then the searches will not pull back the items you want them to pull back.

Shrimp

[Andy_GS]

I just checked that site from that thread, and typed this in:

a'dobe

and it came back with the exact same error i get.

I just check this one:
http://www.boxandsupply.com

and they seem to add a \ where ever there is an '.

im guessing some sorter:

$var("'","\'",$var); 

needs to be put somewhere or somthing similar, but i can't quite see from the /includes/modules/pages/advanced_search_result/header_php.php where exactly it should go.

any ideas?

Andy.

[afo]

An apostrophe (or single quote) is a special character in php denoting the beginning or end of a string. Putting a \ in front of is "escapes" it - meaning it tells the php that the character shouldn't be intrepreted as the start/end of a string. This has nothing to do with Zen Cart. It's the way php works.

[Andy_GS]

Yeah i understand that '' are used within php and that is the reason its not working as stated above.

So somewhere in the code this tag must be used:

mysql_real_escape_string 

does this go in:
/includes/modules/pages/advanced_search/header_php.php

or

/includes/modules/pages/advanced_search_result/header_php.php

and if so where abouts?

kind regards

Andy.