Problems with quotes in writing to file

[Anon]

I have a script:

---

<?php
if ($iid)
{
reset($HTTP_POST_VARS);
$str = "start=1&";
while (list($key, $val) = each($HTTP_POST_VARS))
{
$str = $str.urlencode($key)."=".urlencode($val)."&";
}
$str = $str."loaded=1&";
$filename = $iid.".txt";
if (!file_exists($filename))
{
$fp = fopen($filename,w);
if (fwrite($fp,$str))
{
echo "info=Saved!";
}
else
{
echo "info=Error!";
}
fclose($fp);
chmod( $filename, 0666 );
}
else
{
$fp = fopen($filename,w);
if (fwrite($fp,$str))
{
echo "info=Saved!";
}
else
{
echo "info=Error!";
}
fclose($fp);
}
}
?>

---

The trouble is that when I fill in my forms and send the data to the PHP script, anytime it encounters a " or a ' or a \ it adds \ in front of it. So "hi" ends up \"hi\" and then if I send it again it ends up \\"hi\\"

This is URGENT!!! I MUST have this issue resolved. PLEASE HELP ME!!!!

[Anon]

That is happening because magic_guotes_gpc is enabled on the server. You can get around this by using stripslashes(), either when you read the data, or print it out. Depending on how you are reading the data file.

echo stripslashes($my_String);

In php4.+, when I write to the file, I run it through addcslashes(), when I read it, I run it through stripcslashes().

addcslashes will delimit new lines, hardbreaks, ect. stripcslashes() will strip all the delimiters from the string. It seems to strip all delimiters, with or without
magic_quotes_gpc() being enabled on the server.

Or, you could simply test for magic_quotes_gpc and run it through stripslashes() if magic_quotes_gpc is enabled.

if (get_magic_quotes_gpc()) {
$my_String = stripslashes($my_String);
}

[Anon]

Actually I checked, and stripslashes doesn't always strip them all off. Sorry about misleading you. Just run it through the if statement and you should be alright.

if (get_magic_quotes_gpc()) {
$my_String = stripslashes($my_String);
}

[Anon]

thanks