problems with slashes

nozom

i am having problems with PHP placing slashes into my POST vars.

ex: This isn't good

returns as This isn\'t good. This also occurs when using \" as well.

Cheers,
Hugh

matt_4013

yeah. this is because in your php.ini you have magic_quotes_gpc turned on. This is a good thing, so don't turn it off. It just means that when you're displaying content, you need to use the stripslashes() function on it.

eg,

echo stripslashes($_POST['foo']);

It puts the slashes there to escape potentially dangerous characters for filesystem and database calls. 🙂

FrozNic

just as a personal thought... I HATE QUOTES!!! that being said let me suggest an idea... kind of food for thought... whenever someone wants to use quotes in php, instead of using quotes, we should convert to the international symbal of ‡ because it makes no sense why we would do this, but php wouldn't go balistic with quotes like it seems to like to do on huge projects that you just can't figure out why you can't get the stripslashes and removeslashes to all work out perfectly... anyway, my point is, i don't have one. just venting over my hate for quotes at this moment! that is all =) bye

matt_4013

uh huh :eek:

nozom

interesting responses guys, cheers. i was using strip slashes but that wasn't quite correct for my needs as i needed to re-populate a text field with the text as well, which meant that " terminated the textfield early so..

with a lot of help from the php.net site

$apos = "'";
$quot = """;

$done = str_replace("'",$apos,stripslashes($_POST[var]));
$done = str_replace('"',$quot,stripslashes($done));

this way the finished var is clean of any nasties (i think)

cheers,
hugh

laserlight

actually, you could have used htmlspecialchars() after using stripslashes()

FrozNic

ur a fricken genious 🙂 thx lol... i learn new function everyday =)

matt_4013

You could just use htmlspecialchars(stripslashes($_POST['var']));

matt_4013

oh goddam, too slow 😉 That'll teach me to actually work at work!