Flash PHP MySQL issue

Question

can someone please tell me what i'm doing wrong:
(Actionscript)
var db_out:URLVariables = new URLVariables();
db_out.from = "property";
db_out.where = "`state`='OR'";
var db_req:URLRequest = new URLRequest("php/search.php");
db_req.data = db_out;
db_req.method = URLRequestMethod.POST;
ldr_db.load(db_req);
(PHP)
$select='`id`';
$from=$_POST['from'];
$where=$_POST['where'];
$order='`type`';
$result=mysql_query('SELECT '.$select.' FROM `'.$from.'` WHERE '.$where.' ORDER BY '.$order);
this returns no results.
this issue is within the db_out.where variable.
other searches where db_out.where is a Number (IE: where = "`status`=1") work fine.
so how do i pass a String query from Flash to MySQL?
if it were a single variable sent to PHP, i would wrap it in single quotes (IE: ''SELECT '.$select.' FROM `'.$from.'` WHERE `state`='."'".$var."'".' ORDER BY '.$order), but how do i properly send a WHERE statement from Flash to MySQL involving a String??
much appreciated,

Answer 1

i figured it out. no idea why this is an issue, but it seems to be.
if Flash passes a string to PHP to be used in a MySQL query, and that string contains single quotes (IE `city`='Portland'), the query will return 0 results, even if its WHERE had an OR conditional in it not using single quotes (IE `status`=1).
so here's the fix:
use some unused symbol in place of the single quotes (IE ^) in Flash, and have PHP use str_replace to swap them for single quotes.
i dont know why PHP has to be the one to implement the single quotes, but it seems to
IE:
$where = str_replace('^', "'", $_POST['where']);
i hope this saves someone the hours i spent trying to figure this one out!!