title: MySQL insert data containing single and double quotes giving a syntax error
body: <p>I am using the following insert statement within a tool pulling data from one DB into another one.</p>
  
  <pre><code>INSERT INTO act_vulnerabilities_internal_test (device_type, ip_address, user_tag,       
  repositoryID, severity, pluginID, pluginName, pluginText)
  
  VALUES ("@Data.device_type~", "@Data.ip_address~", "@Data.user_tag~",    
  "@Data.repositoryID~", "@Data.severity~", "@Data.pluginID~", "@Data.pluginName~",   
   @Data.pluginText~)
  </code></pre>
  
  <p>Error message: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\nSynopsis :\n\nIt is possible to retrieve file backups from the remote web serv' at line 3</p>
  
  <p>The data I am trying to pull from one of the columns has a lot of single and double quotes in it (this is pulling from a proprietary tool and I cannot edit the data). The column giving me the problems is the one named pluginText. Is there a way to make the db ignore the ' and " contained within the rows?</p>
  
  <p>Is mysql_real_escape_string what I need to do this properly?</p>