addslashes() is overdoing it.

[Anon]

Hi everyone,

I made a simple form:

<input type="text" name="mytext">
<input type="submit">

the action:

<?php
echo $mytext;
?>

The result:
\'

if I use addslashes, I get \\'

Anyone else find this wierd?

I am running PHP4.0pl2 on a heavily modified Slackware machine.

[Anon]

By the way, what I typed into the box was
'

--ryan

[Anon]

Actualy thats quite normal, it's the way http pages have to be encoded to show exacly what you typed without it messing up certain page sections.

So all you do is just run stripslashes() on the resulting data before using it for anything and you will have an exact duplicate of what you typed in to the form.

[Anon]

The reason for the double escaping is that you have magic quotes on. Magic quotes automatically escapes data passed to the script via Get, Post and Cookie. When on, if you use addslashes on these data, you will experience double escaping.