SQL Server中使用PHP的转义字符串

string addslashes(string $str)

$connection = sqlsrv_connect($serverName, $connectionOptions);

if ($connection === false) {
    die(print_r(sqlsrv_errors(), true));
}

$unsafeString = "John's book";
$safeString = addslashes($unsafeString);

$sql = "INSERT INTO table_name (column_name) VALUES ('$safeString')";

$result = sqlsrv_query($connection, $sql);

if ($result === false) {
    die(print_r(sqlsrv_errors(), true));
}

sqlsrv_close($connection);