[Phpgroupware-developers] Help with quotes in sql statements

[Brian Johnson]

Could someone help me with to change this sql statement from the addbook 
module, it
has problems with names that include a single quote (like O'Sullivan)

$sql = 'UPDATE phpgw_addbook_person_main SET ';
$sql.= 'title = \''.$person['main']['title'].'\', ';
$sql.= 'last_name = \''.$person['main']['last_name'].'\', ';
$sql.= 'middle = \''.$person['main']['middle'].'\',';
$sql.= 'first_name = \''.$person['main']['first_name'].'\', ';
$sql.= 'birthday = \''.$birthday.'\', ';
$sql.= 'gender = \''.$person['main']['gender'].'\'';
$sql.= ' WHERE id = '.$id;

This doesn't work

$sql = "UPDATE phpgw_addbook_person_main SET ";
$sql.= "title = \"".$person['main']['title']."\", ";
$sql.= "last_name = \"".$person['main']['last_name']."\", ";
$sql.= "middle = \"".$person['main']['middle']."\",";
$sql.= "first_name = \"".$person['main']['first_name']."\", ";
$sql.= "birthday = \"".$birthday."\", ";
$sql.= "gender = \"".$person['main']['gender']."\"";
$sql.= " WHERE id = ".$id;