Addslashes problem

Operandi

Sorry about posting yet another addslashes question, but I'm stumped on this and can't find an answer.

I use this function when adding text to MySQL, but notice that slashes are added to the text in the db when get_magic_quotes_gpc is on. This means that I then have to stripslashes when displaying the text from the database.

Question: Is this correct, do I need to stripslashes when displaying with magic_quotes_gpc is on, or is there an error somewhere?

function add_slashes ( $text )
    {
    if ( !get_magic_quotes_gpc() ) 
        {        

        $text = addslashes( $text );
        }
        return $text;
    }

When I add text like this with magic_quotes_gpc :

"I can't wait"

All I get in the db is this: \

How can I overcome this problem?

In general - do I have to stripslashes when displaying text from the db, when slashes are added to the text?

Is it better to do a character replace ( ie replace " with quot; )instead of bothering with slashes at all, and if so how?

TIA

Chris

khaldryck

i think best is to replace quotes and special chars into their HTML equivalent.

use html_entities() to do that.
(read more in the php manual)

Operandi

i think best is to replace quotes and special chars into their HTML equivalent

Thanks for this. Do you mean converting the " and ' characters to HTML before adding to the database.

get_magic_quotes definitely fails when trying to add the following text to the MySQL database:

"I'll see what I can do"

khaldryck

yes, before inserting the variable in your db, just use html_entities on it, it will convert quotes and special chars ...

maybe you'll have to stripslashes too, but i'm not sure of this.

read the PHP manual about those function

Operandi

yes, before inserting the variable in your db, just use html_entities on it, it will convert quotes and special chars ...

Yes - that worked. Thanks 🙂