stripslashes

[seby]

I'm having a bit of a problem using this function. When i post an article that contains a \ its automatically stripped and i dont want it to be stripped.

say I post an article with "c:\programs\files" it becomes "c:programsfiles"

obviously i need stripslashes to strip slashes off articles with \"quotes\"

The only work around i found was posting articles with double slashes, ie: c:\programs\files so it will leave just one slash..

but then that develops another problem .. Now when i edit an article it becomes c:programsfiles so i then have to re-add the \

are there any solutions? or will i have to live with it?

[laserlight]

Well, if magic_quotes_gpc is set to 1, the article text should be escaped.
This means that
c:\programs\files
should become
c:\programs\files
so that stripslashes() should work normally.

If magic_quotes_gpc() is not on, then you should be using addslashes() before say, using the data in a database query.

[LordShryku]

Fix: Switch to Linux 😃 sorry, couldn't resist

I suspect these articles are stored in a database? Sometimes, I've found the best bet is to replace them on storage, and replace them coming out...

//on insert, do a str_replace to put a holder for them
<?
$string = "C:\Program Files\Somewhere\Someplace";
$newString = str_replace("\\(actually two slashes here)","[slash]",$string);
//should return "C:[slash]Program Files[slash]Somewhere[slash]Someplace"

//Now on the way out....
$string = "C:[slash]Program Files[slash]Somewhere[slash]Someplace";
$newString = str_replace("[string]","\\(actually two slashes here)",$string);
?>

Kinda a workaround...but effective...

[seby]

yes that is how it is now, magic_quotes_gpc is on.

so... when i insert into db i use addslashes, then when i retrieve i use stripslashes .. so it still leaves me with the same problem.

see, my first post in this thread left all the slashes because that is the way i wanted it to display, but if i do that on my script it will remove all the slashes unless they are double \ which then it will leave just one [/b].


P.S. LordShryku, i am on linux... and yes, they are stored in mysql.

[LordShryku]

Sorry...semed like a Windoze question 🙂

[laserlight]

hmm... maybe try this:

<?php
if (!empty($_POST['data']))
	echo stripslashes($_POST['data']);
?>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<input type="text" name="data">
<input type="submit">
</form>

type in your "c:\programs\files" and see what output you get.

LordShryku's method seems like an unnecessary hack that may make your data less portable though.

[LordShryku]

Right, you should never use any code I give you. It could be dangerous for your health.

[laserlight]

nah, LordShryku's code probably wont kill you.

at least he only has read access as per his signature.

[seby]

okay, let me get this right .. if magic_quotes_gpc is on i dont need to use addslashes when inserting into text into mysql? is it safe?

lastly, What type should i use for text in mysql (articles), mediumtext or text, what is the difference? can't find this in mysql doc.

[laserlight]

if magic_quotes_gpc is on i dont need to use addslashes when inserting into text into mysql

it is safe, as far as I know.

What type should i use for text in mysql (articles), mediumtext or text, what is the difference? can't find this in mysql doc

search the mysql docs for column types.