problems with ' and \

[Anon]

i have a little comment thing for news on my site. the comments get writen to a mysql database. but if the comments contain the characters "'" or "\" then the comment will not be writen. i was wondering if there was a way to replace these characters or make is so they do get writen with out problems.

thanks
-Jaret

[Anon]

try addslashes()

[Anon]

thanks, after trying a few things, i found that str_replace() was the best.

[jcornett]

I thought I'd include a common loop I use with form variables to get them database ready. It runs addslashes on every variable received from a "POST" type form:

<?php

Reset($HTTP_POST_VARS);
While(List($key, $val) = each($HTTP_POST_VARS)) {
$$key = addslashes($val);
}

?>

You could also replace the addslashes part in the loop with str_replace if you prefer. Of course, this assumes you don't have magic-quotes enabled. 🙂

John Cornett