Database Errors

Please could someone be as kind to let me know how to resolve this error?

Query:

INSERT INTO `bx_wall_events`(`owner_id`, `object_id`, `type`, `action`, `content`, `title`, `description`, `date`) VALUES('153', '1525', 'wall_common_link', '', '<div class="wall-post-link"><div class="wall-lnk-title">DJ Em-Jay 'Bounce Attack' Vol 15 (Wigan Pier Promo).mp3 - 4shared.com - online file sharing and storage - download</div><div class="wall-lnk-url"><a href="http://www.4shared.com/audio/w4i0Wd62/DJ_Em-Jay_Bounce_Attack_Vol_15.htm" target="_blank">http://www.4shared.com/audio/w4i0Wd62/DJ_Em-Jay_Bounce_Attack_Vol_15.htm</a></div><div class="wall-lnk-description"></div></div>', 'DJ Em-Jay shared link', 'http://www.4shared.com/audio/w4i0Wd62/DJ_Em-Jay_Bounce_Attack_Vol_15.htm - DJ Em-Jay 'Bounce Attack' Vol 15 (Wigan Pier Promo).mp3 - 4shared.com - online file sharing and storage - download', UNIX_TIMESTAMP())

Mysql error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Bounce Attack' Vol 15 (Wigan Pier Promo).mp3 - 4shared.com - online file sharing' at line 1

Found error in the file '/var/www/vhosts/clubnetuk.net/httpdocs/modules/boonex/wall/classes/BxWallDb.php' at line 59.
Called 'query' function with erroneous argument #0.

Perhaps it's because the link contained characters like () and '

Any help greatly appreciated as I get quite a few of these through and they 7Mb each.

Thanks

I would say thats a good place to start. Try renaming the file to something else before uploading it. Having symbols such as (, ), ', or " can throw off SQL statements.

Well it's a link that a member shares on their profile wall so I can't stop them trying to share whatever link they come across but I will test with a link that doesn't contain any characters and see if it posts without error. Thanks

If a post without single quotes works but a post that contains them does not, then it's a bug. Database inserts need to be properly escaped prior to inserting in the database.