<?php
require "connection.php";

if(!$con)
{
	echo 'Not Connected To Server';
}

if(mysqli_select_db($con,'wishes_database'))
{
	header('location: thankyou.html');
}


$Name = $_POST['name'];
$Character = $_POST['character'];
$Wishes = $_POST['wish'];

$sql = "INSERT INTO comments (Name,Favorite,Comment) VALUES ('$Name','$Character','$Wishes')";

if(mysqli_query($con,$sql))
{
	echo 'Not Inserted';
}
else
{
	echo 'Not Inserted Dummy';
}

{
String userString="a'bcd";
String changedUserString = userString.replace("'","''");
        //changedUserString  = a''bcd
String insertTableSQL = "INSERT INTO myTable (insertColumn) VALUES("
                        +" '"+changedUserString +"' )";
						}
?>