POST variables not passed correctly when containing quotes

angrytuna

Good morning to the forum! (morning here, anyways).🙂

I have a problem. I am passing a string of text via POST that may or may not contain quotation marks. The problem is, PHP is doing something strange; it keeps chopping off the section containing the quotes. Code follows demonstrating this:

<html>
<head>
<title>Test Send</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<?php
print "<font color='#FF0000'>".$_POST['test']."<br /></font>";
?>
<form action="test.php" method="post">
<input type="text" name="test" value="<?php print $_POST['test']; ?>">
<input type="submit">
</form>
</body>
</html>

If you enter a string like Hello "World", the variable prints as Hello \"World\" the first time, and Hello \ the second time. The backslashes get worse as you keep hitting the submit button. I have no idea why this is.
I would really appreciate anyone's help with solving this. Thank you in advance for even taking a look.

stolzyboy

have a look into [man]addslashes[/man] and [man]stripslashes[/man]

angrytuna

How should I be using these? I tried the following:

<html>
<head>
<title>Test Send</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<?php
$_POST['test'] = stripslashes($_POST['test']);
print "<font color='#FF0000'>".$_POST['test']."<br /></font>";
?>
<form action="test.php" method="post">
<input type="text" name="test" value="<?php print $_POST['test']; ?>">
<input type="submit">
</form>
</body>
</html>

Now the slashes are stripped, but the "world" portion just disappears from the textbox, and if I resubmit, it's gone for good. I just want the POST string to remain constant for however many iterations. Very frustrating.

stolzyboy

change this

<?php
$POST['test'] = stripslashes($POST['test']);
print "<font color='#FF0000'>".$_POST['test']."<br /></font>";
?>

to this

<?php
$testvar = stripslashes($_POST['test']);
print "<font color='#FF0000'>".$testvar."<br /></font>";
?>

angrytuna

I tried that; it didn't seem to make a difference. Here's the code as you suggested:

<html>
<head>
<title>Test Send</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<?php
$testvar = stripslashes($_POST['test']);
print "<font color='#FF0000'>".$testvar."<br /></font>";
?>
<form action="test.php" method="post">
<input type="text" name="test" value="<?php print $testvar; ?>">
<input type="submit">
</form>
</body>
</html>

I have to leave for today, but I appreciate your help, and I will be looking hopefully on Monday for any other suggestions. Thanks again.

angrytuna

Nothing like a weekend away from a problem to show you how you're being dumb. I took one look at my code above, and the problem became apparent. Specifically, this line:

when $testvar contains the string Hello "World"

post-parser:

<input type="text" name="test" value="Hello "World">
:eek:

Mark this one as closed. Thanks again for the help.

stolzyboy

how 'bout you mark it resolved with the link at the bottom of the page