[Resolved] Apostrophe, PHP, mysql and Form...

thedream

Hello with all.

Here my concern: I have a data base on Amen, and a form on a site , in the direction or the adjustments PHP magic_quote and others are OFF (it is significant for the continuation.).

I seized of the data in my tables like:

O\' Reilly, Jean Richard\' S, etc...

Notice the antislashe before the apostrophe, to prevent that Mysql goes crazy.

Now, the problem:
In my form of research, if I type: O' Reilly, it says to me that there is an error because of the apostrophe.
I thus use the function:

$query = addslashes($query);

but nothing made there, it says to me that it does not find: O\' Reilly, in short it is the brothel and does not find me there;

I tried to find a solution on the Net, and apparently I am not only in this case...

How to make then to be able to carry out a request of the type: O' Reilly?

If I must modify seized of my data, how to make?

And how to recover the value treated without antislashes in the field of request?

With my thanks, Marc-André

laserlight

Since magic_quotes_gpc is 0, using addslashes() is correct.

You should use it both when storing and when selecting from database, then.

ahundiak

Actually, if slashes are not being automatically added (which is a good thing IMHO) then you can use standard sql statements. All you need to do is to "double up" the single quotes i.e.

$name = "O'Rielly";
$name = str_replace("'","''",$name);
$sql = "INSERT INTO whatever VALUES('$name')";

This is documented in the mysql manual. One of few things that the php founders really messed up (again IMHO) was to build in automatic support for non-standard sql extensions.

thedream

yes, but I thint it doesn't answer my question:

How do I do to query - O'Reilly - and/or - Reilly- to get as a form result - O'Reilly - ?

Marc

ahundiak

Ok. We need to back up a bit. You say you have majic_quotes off but you still have data in the database with the back slashes? I assume you are looking at your data with something like phpAdmin or the mysql utility.

If the actual data in the database has the slashes then you will need to add them to whatever you are searching by. How the slashes got into the database with majic_quotes off is a bit confusing but I'll take your word for it.

Your original post had:
$query = addslashes($query);

May I assume that $query was your complete query? If so then it will fail because you will end up adding slashes to single quotes that should not be slashed. Instead, only use addslashes on the actual data being searched:

$name = "O'Rielly"; /* This is from the form, no slashes */
$name = addslashes($name); /* Add the slash to match the database */
$query = "SELECT * FROM whatever WHERE name='$name'";

thedream

You ARE GREAT!!!!

But....

All is perfect except when I want to display back the query inside the text form query (a reminder for the surfer), I've got, for exemple:

query: O'Reilly

back display in the text form query: O\\'Reilly !

I have tried to stripSlashes the display, but I've got:
O\'Reilly (there is always a slashe !)

How do I get rid off?

Sincerely yours,

Marc

thedream

I'VE GOT IT!!!!

I have the Solution !

Thank you very much to all, and particularly to ahundiak !

Here is the answer to avoid a result like O\\'Reilly inside the query field:

$search = stripSlashes(stripSlashes($search));
echo $_GET['$search'];

and you will get for answer: O'Reilly

Thanks again,

Marc-André