Sql error caused by an apostrophe ( ' )

[MitchSchaft]

www.rig-talk.com

Tried to submit a "ticket" to you guys, but I don't have permission to do so.

Anyway, when I create a category, and add an "extra field"; if I put an apostrophe in the name "Manufacturer's URL", I get errors when adding subcategories.

We're sorry, but the system experienced an unrecoverable error. Please try again later.

Script: adm-misc

Query: INSERT INTO rpost_categories (id,catname,description,catorder,thumbs,parent,header,footer,headtags,password,ugnoview,ugnoupload,ugnoanno, template,extra1,extra2,extra3,extra4,extra5,extra6,sortorder,frames) VALUES(NULL,'Agile','','4','yes',10,'','','', '', '', '', '167,468,604,1,2,3', '0', 'Manufacturer's URL', '', '','', '', '', '2', '')

Result: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's URL', '', '','', '', '', '2', '')' at line 4

Database handle: Resource id #6

I can remove the apostrophe and it will create subcategories fine after that. I assume this is a bug and I'm wondering what kind of issues it may cause in other parts of the program in the future.

[Chuck S]

In adm-misc.php try adding these in bold

Content visible to verified customers only.

[MitchSchaft]

Nah, that didn't do it. Unless I added it wrong, here's the whole string:

typecast($_POST, array('catname' => STRING, 'catdesc' => STRING, 'myheader' => STRING, 'delcomments' => STRING, extra1 => STRING, extra2 => STRING, extra3 => STRING, extra4 => STRING, extra5 => STRING, extra6 => STRING,

[Chuck S]

It should meaning it should typecast those variables and add a slash I will test it