HTML linking, licked it, but now a new question...

[cyronuts]

So, now, in my site administrator section, I allow the site owner to update pages, and resubmit the html code back for storage in the db column. The new problem...when the information is submitted back, it looks like PHP is adding escape \\'s each time the submit is made, and it is really wacking things out when the html is presented each new time (after an update has been submitted) in the browser . Is there some basic command I am missing? Thanks! Here is the submit code and the form code.

SUBMITTED HTML CODE:

This is my code<BR><BR>

This is my page<BR><BR>

<i>You know nothing<i><BR><BR>

<IMG SRC="site_img1.gif" WIDTH="100" HEIGHT="100" BORDER="0">

BECOMES:

This is my code<BR><BR>

This is my page<BR><BR>

<i>You know nothing<i><BR><BR>

<IMG SRC=\\"site_img1.gif\\" WIDTH=\\"100\\" HEIGHT=\\"100\\" BORDER=\\"0\\">

FORM CODE

<?

// include function files for this application
require_once("sc_fns.php");

$POST['html_page_name'] = addslashes($POST['html_page_name']);

admin_header();

echo "<BR><FONT FACE='ARIAL, HELVETICA' SIZE='2' COLOR='333366'>To update your html page content, change the information below and click submit. <BR>Your html code information will be updated in your cart database<BR>";

db_connct();

mysql_select_db("book_sc");
$query = ("SELECT * FROM html_pages WHERE html_page_name = '$html_page_name'");
$result = mysql_query($query);
$num_results = mysql_num_rows($result);

// echo "<BR>Number of html pages found:".$num_results."";
// This is just for testing purposes

for ($i=0; $i <$num_results; $i++)
{
$row = mysql_fetch_array($result);
}

?>

<FORM METHOD="POST" ACTION="update_html.php">

<TABLE COLS="2" BORDER="0" CELLPADDING="5" CELLSPACING="0">

<TR>
<TD WIDTH="150"><FONT FACE="VERDANA, ARIAL, HELVETICA" SIZE="1" COLOR="000000">HTML Page Name:</FONT></TD>
<TD><INPUT TYPE="TEXT" NAME="html_page_name" VALUE="<?PHP echo $row["html_page_name"]; ?>"></TD>
</TR>

<TR>
<TD WIDTH="150"><FONT FACE="VERDANA, ARIAL, HELVETICA" SIZE="1" COLOR="000000">HTML Code:</FONT></TD>
<TD><textarea cols=40 rows=8 name=html_page_code><? echo $row["html_page_code"]; ?></textarea></TD>
</TR>

</TABLE>

<BR>

<TABLE WIDTH="749" COLS="2" BORDER="0" CELLPADDING="3" CELLSPACING="5">

<TR>

<TD WIDTH="375" ALIGN="RIGHT"><INPUT TYPE="IMAGE" SRC="images/admin/admin_submit_submit.gif" WIDTH="100" HEIGHT="23" BORDER="0" VALUE="SUBMIT"></TD>

<TD WIDTH="374" ALIGN="LEFT"><A HREF="login.php"><IMG SRC="images/admin/admin_submit_cancel.gif" WIDTH="100" HEIGHT="23" BORDER="0"></A></TD>

</TR>

</TABLE>

</FORM>

<?

do_html_footer();

?>

[frigidman]

The evils of "magic_quotes" ... magic my ass! They should have called that configuration setting "screwup_quotes" ... hehehe 😃

If you hate what its doing to your input, you can turn them off in the php.ini (find by 'magic').

If you can't edit your php.ini (or don't want too), you can paste this at the top of your php's to "clean" up the destruction that magic_quotes does.

This is a fully copy/paste of code I have used before... there may be a "shorter" way to do this, but I havnt bothered to find it (since all my servers have magic quotes OFF):

// Fix all incoming data from args for ' " and \\ ... stupid PHP magicquotes bull.
// NOT NEEDED IF php.ini HAS magic_quotes_xxx ALL SET TO 'OFF'
	if (get_magic_quotes_runtime()) {
		reset($HTTP_ENV_VARS);
		while (list($k,$v) = each($HTTP_ENV_VARS)) {
			$HTTP_ENV_VARS[$k] = stripslashes($v);
			$$k = stripslashes($v);
		}
	}
	if (get_magic_quotes_gpc()) {
		reset($HTTP_GET_VARS);
		reset($HTTP_POST_VARS);
		reset($HTTP_COOKIE_VARS);
		while (list($k,$v) = each($HTTP_GET_VARS)) {
			$HTTP_GET_VARS[$k] = stripslashes($v);
			$$k = stripslashes($v);
		}	
		while (list($k,$v) = each($HTTP_POST_VARS)) {
			$HTTP_POST_VARS[$k] = stripslashes($v);
			$$k = stripslashes($v);
		}
		while (list($k,$v) = each($HTTP_COOKIE_VARS)) {
			$HTTP_COOKIE_VARS[$k] = stripslashes($v);
			$$k = stripslashes($v);
		}
	}
	if (get_magic_quotes_runtime()) {
		reset($HTTP_SERVER_VARS);
		while (list($k,$v) = each($HTTP_SERVER_VARS)) {
			$HTTP_SERVER_VARS[$k] = stripslashes($v);
			$$k = stripslashes($v);
		}
	}

[Mega]

o_0

stick:

set_magic_quotes_runtime(0);

at the top of ur script?