String which include's quotes gets error

gabrielk

Hi Folks,

I've got the following problem:

When a user of my php thing gives the following text:

Gabriel's Car

"Gabriel" is the name

The php file tries to work with in in:

$usertext = "$textfrompreviouspage"

Or:

SELECT * FROM table WHERE text LIKE '$textfrompreviouspage'

As you see, the ['] and ["] get to make the php file fail.

How to solve this?

Gabriël.

bernouli

try with

$usertext = addslashes($textfrompreviouspage);

gabrielk

Hi,

Thanks for the answer! It works...

Now I've got a special situation, $datum contains"

"John" loves his' sisters car

Now, nothing will display as value, since the output is:

Any solutions?

bernouli

which type of outputting are you using?
are you using html styles or php styles?

assuming you are using php styles echoing all the input, the soulution should like this

$datum= addslashes($datum);
echo '<input type="text" name="datum" value="$datum"> ';

since the echo funtion can make difference between single quote (') and double quote (")

when you are using html styles, the solution would be

$datum= addslashes($datum);
<input type="text" name="datum" value="<?=$datum?>">

Weedpacket

Originally posted by bernouli

when you are using html styles, the solution would be
$datum= addslashes($datum);
<input type="text" name="datum" value="<?=$datum?>"> 
[/B]

Correction: htmlspecialchars($datum)

bernouli

Originally posted by Weedpacket

Correction: htmlspecialchars($datum)

@Balding Member: why does man use htmlspecialchars, since the problem is only to get rid of quotes and not the html tags?

Weedpacket

Originally posted by bernouli

@Balding Member: why does man use htmlspecialchars, since the problem is only to get rid of quotes and not the html tags?

Because quotes are special html characters!
Vide:

<input type="text" name="datum" value=""John" is a very common name">

bernouli

as you will, the most important is .. problem solved