Apici su INSERT INTO

[roberto-if]

function mysql_apici($s) { return "\"".mysql_escape_string($s)."\""; }

$pippo = mysql_apici($pippo);

$result = mysql_query("UPDATE `miofile` SET `pippocampo` = '$pippo' WHERE ...... ") ;