Help with Passing " (quote) marks

[briansol]

I'm having a problem with passing Quote marks.

In my application, I have a feeling a lot of people will be entering in 8"
(read: Eight Inches) for a couple of fields. Being a 10 step-by-step configurator, i'm having a problem with handeling them.

1- by the 2nd page, i have \" and it only adds slashes if the page is refreshed, and on the next step.

2- i added a stripslashes() to my post var at the next step, but that kills the " mark all together from that point forward.

What's the best way to go about this? Converting " &quote (i think that's what it is anyway...) or should I do a str_replace each time? And if so, what am I searching for, and what am I replacing? I tried a few different ways, but i got syntax errors due to "\\"" all over the place 🙁

[The_Chancer]

Try looking at addslashes in the manual...

[DeltaRho2K]

stripslashes(addslashes($variable));

[briansol]

Originally posted by DeltaRho2K
stripslashes(addslashes($variable));

nope, still doesn't work.

after submitting an answer of 24" to a form on step 2,
by step 4 it looks like this: 24\\

here's what i have...

$lead = stripslashes(addslashes($lead));
$lead = $_POST['lead'];
echo "<input type=\"hidden\" class=\"input\" value=\"$lead\" name=\"lead\">";

[briansol]

if anyone wants to try it to see what i mean,
http://www.fluidswitch.com/products/configurator/index.php?id=fm10

Just don't fill out the last step- as that will send an email to my boss 🙂

[laserlight]

I generally use these 3 user-defined functions in my own projects, so far they have worked well enough:

//for storage to database
function prepIn($input) {
	$input = trim($input);
	if (!get_magic_quotes_gpc()) {
		return addslashes($input);
	}
	return $input;
}

//for o/p to html page, textbox or textarea
function prepOut($output) {
	$output = stripslashes($output);
	return htmlspecialchars($output);
}

//for multi-line o/p to html page
function prepOutNl($output) {
	$output = stripslashes($output);
	$output = htmlspecialchars($output);
	return nl2br($output);
}

In your case, I would then use:

echo '<input type="hidden" class="input" value="' . prepOut($_POST['lead']) . '" name="lead">';

[briansol]

dude - you rock 🙂

thanks a bunch

[briansol]

ok, one small problem....

Fatal error: Cannot redeclare prepout() in /home/httpd/vhosts/fluidswitch.com/httpdocs/products/configurator/formposts.php on line 3

i know why it's happening...
I have a drop down slect box, and if "other" is selected, it goes to a new page with a text box with the same Var name for user input.

How can i "destroy" the value of $_POST['var']; so that it is clear before the next page post passes the same variable?

I tried:

$_POST['var'] == " ";

but, that's still making it exist... even though empty.

any ideas?

Thanks in advance

[briansol]

I also just tried

unset($_POST['var']);

and

$_POST['var']="";

but im still getting the "exists" error

[briansol]

ok, nevermind.. I'm an idiiot :p

problem was I was including my function file twice. All is well once again.

Thanks for that function once again- saved me a lot of time.