addslashes() and stripslashes()

[dcotter]

I have built an administration section to my site to add certain news topics. When I post a news topic such as:

Morning's "special" news

I have trouble with the single and double quotes. After much research, I worked around this by doing the following:

First, on the page that adds the news to the database, I use the stripslashes() function. Then, I replace the ' with SGQ, and the " with DBQ, and that is how the info is stored in the Database. Then, on the site, I replace the SGQ with ', and DBQ with ", and everything works fine. However, I'm running into trouble when trying to modify my news listings. On the admin page, to update a news item, I replace the 3-letter abbreviates with quotes, but in the text box that stores the news topic, I get:

Morning'

That is all...it stops printing to the value of the text box, because it encounters the '. One way around this would be for just the SGQ to be displayed in the text box, but if I want to grant access to someone to update news who doesn't know what this means, I will have troubles.

Can someone please help?

TIA,

[Anon]

Try using magic quotes:
set_magic_quotes_runtime(1);

I had trouble with stripslashes(); but this function does it all for you. Just place this at the top of your script.
Hope this helps!

[dcotter]

That doesn't work...I still get the same error.

[[deleted]]

use addslashes when you insert, and stripslashes when you print.

$query="INSERT INTO table (field) values (\"".addslashes($string)."\")";

Sometimes stripslashes is not even required, and addslashes only works for MySQL databases.
Other databases require that you replace single-quote-chars (not singlequote chars)
So ' becomes '' and " becomes "" before you insert into the database.