text box save

[Anon]

here is the issue I have a textbox that a person types HTML code into and then hits save then I have the data sent by the post metod to a bit of code that is supposed to save whatever to the file. it works but whenever there is a " it adds a \" in front of it thus making the page (html page) function incorrectly. Here is the save code

session_start();
if ($auth == "googalybear" ){
$translation_table = get_html_translation_table(HTMLENTITIES);
$translation_table = array_flip ($translation_table);
$file_content = strtr ($file_content, $translation_table);
$fp = fopen("$directory/$file", "w"); ##This Saves the file that they were editing into predefined varibles
fwrite($fp, $textfield);
fclose($fp);
} else {
header("Location:/login/mysql/error/error.php");
exit;
}

[Anon]

This is a typical problem in PHP. "Magicquotes" is the option that escapes all user input so it is easy to save the data via SQL or similar methods where the text is quoted again. Just use "stripslashes" and you're done.

$file_content = stripslashes($file_content);

This should be the first thing you do with $file_content.

[Anon]

Thanks it works perfect now

John