Search query in Mysqli (Prevent single quote in column- without replacing it) - php

Question

I want know if there is a function in MySQLi that will let me to look for a words that contain a single quote.
An example is better than hundren explaination, here is it:
-> First
I receive a word to search in PHP (Ex: Example's containing quote)
I have a function that remove all quote (') from any received text string
And then i perform a search in the MySQL database, but the value in the MySQL database contain the QUOTE.
So, i receive the data like this:
$text_to_search = "Examples containing quote"; // Removed the quote
Column in database = "Example's containing quote";
How to remove the quote in database so i can compare it to the received text string with quote removed ?
Do SOUNDEX will work in my case ?
Thank's in advance.

Answer 1

You can conditionally check for both versions of your string. Query for one or two values depending on the existence of a single quote.
Untested code:
$config = ['localhost', 'root', '', 'dbname'];
$search = "Examples containing quote";
$values = [$search];
if (strpos($search, "'") !== false) {
$values[] = str_replace("'", "", $search);
}
$count = sizeof($values);
$placeholders = implode(',', array_fill(0, $count, '?'));
$param_types = str_repeat('s', $count);
if (!$conn = new mysqli(...$config)) {
echo "MySQL Connection Error: <b>Check config values</b>"; // $conn->connect_error
} elseif (!$stmt = $conn->prepare("SELECT * FROM tablename WHERE columnname IN ($placeholders)")) {
echo "MySQL Query Syntax Error: <b>Failed to prepare query</b>"; // $conn->error
} elseif (!$stmt->bind_param($param_types, ...$values)) {
echo "MySQL Query Syntax Error: <b>Failed to bind placeholders and data</b>"; // $stmt->error;
} elseif (!$stmt->execute()) {
echo "MySQL Query Syntax Error: <b>Execution of prepared statement failed.</b>"; // $stmt->error;
} elseif (!$result = $stmt->get_result()) {
echo "MySQL Query Syntax Error: <b>Get Result failed.</b>"; // $stmt->error;
} else {
$resultset = $result->fetch_all(MYSQLI_ASSOC);
echo "<div>Numrows: " , sizeof($resultset) , "</div>";
foreach ($resultset as $row) {
echo "<div>Row: {$row['columnname']}</div>";
}
}