single quotes (') in lastnames

[Guest]

Hi,

 

A customer tried to create an account with the lastname O'Keefe they recieved an error.

 

I would have thought that tep_db_prepare_input would have handled this by using addslashes() function.

 

But on looking at this function is appears to use stripslashes().

 

Does this mean I am going to have to go through all the code fixing it with addslashes() for input surnames and then fixing code where it retrieves it from the database with stripslashes().

 

Any help appreciated.

 

Mike