stripslashes

[hypersound]

I am passing form element from page to page...

Page1
<input name="firstname" type="text" id="firstname" value="" size="30">

Page2
<?php echo $HTTP_POST_VARS['firstname']; ?>

But when I type is a value with an apostrophe in the form element, the result in page2 shows a slash \ as well. Is there a way that the slash will not be added instead of adding the stripslashes command?

<?php echo stripslashes($HTTP_POST_VARS['firstname']); ?>

[diego25]

In your php.ini, you'll have a setting for magic quotes. Set that to off.

Diego

[hypersound]

Will that affect any of my sql inserts in a bad way?

I was reading up about escaping date and how when creating SQL statements string values are delimited using apostrophes. So what happens when there is an apostrophe in the data you are trying to insert? Will an error occur because the magic quotes are set to off?

Would that then mean I would have to include the addslashes() function?

[diego25]

Yup, you'll have to use addslashes. Or you can also use mysql_escape_string.

Diego