EREG_REPLACE Problem

djXternal

I Am Using The EREG_REPLACE Function To Replace Any Single Quotes(') With A Double Quote(") In A SQL String That Writes To A DB, But When The Code Executes It Replace The Single Quote With A Backslash And Double Quote (\")

$msg = ereg_replace("'",""",$_REQUEST['msg']);

Is The Replace Code Im Using

weekender

you can't have a double quote in between two doubles without a slash - if you think about """, the first marks the opening of a string, the second... marks the end of a string! and the third? the third just confuses the parser.

So you must use an escape character - the / - this tells the parser to treat the " as a character rather than the end of the string

It will still appear as just a " to the browser tho...

adam

djXternal

When I Use The / Before The " I Get The Error: Parse error: parse error, unexpected '"' in c:\webserver\forum-post.php on line 11

weekender

post some relevant code...

djXternal

$dbc = new COM("ADODB.Connection");

$connstr = "DRIVER={Microsoft Access Driver (*.mdb)};";
$connstr .= "DBQ=c:\webserver\dbs\forums.mdb;uid=;pwd=;";
$dbc->open($connstr);
$msg = ereg_replace("'","''",$REQUEST['msg']);
$rs = $dbc->execute("INSERT INTO sas (title, user, msg, reid) VALUES ('".$REQUEST['title']."', '".$COOKIE['sas']."', '".$msg."', '".$REQUEST['id']."')");
$dbc->close();

helz

its \ backslash to escape a character

djXternal

When I Use The Backslash I Get The Error That I Had Posted Above

helz

when you posted before you put a forwardslash /
not a backslash, have you tried both?

djXternal

With Forward Slash I Get The Error... But With Back Slash It Replaces The Single Quote With (\")

helz

i have found that if information is posted from a form the ' and " are automatically added with an escape character.
this is normal, even though you see the escape character, it is not displayed when you output data from the db