Should I use add slashes and strip slashes?

[szym9341]

I am adding some small images into mySql. Right before the insert I have the following:

$data = addslashes(fread(fopen($_FILES['uploadfile']['tmp_name'], "r"), $_FILES['uploadfile']['size']));

In another script when I request the image, I use stripslashes, but I can't get it to work. It works fine without using strip slashes. Should I just delete the addslashes line?

<?php
include("dBconnect.inc");
$id = 4;
$get_image = "SELECT filedata, mimetype FROM filestore WHERE filestore_id = $id";
$get_image_result = @mysql_query($get_image) or die("Couldn't get image.");
$filedata = @mysql_result($get_image_result,0,"filedata");
//$teststrip = stripslashes(fread(fopen($filedata, "r")));
$mimetype = @mysql_result($get_image_result,0,"mimetype");
header("Content-type: $mimetype");
echo "$filedata";
?>

[Nate]

im not sure but just a side note, if all your doing is reading the image into a string, you should use file_get_contents ( string filename ). its supposed to be quicker then fopen/fread. just fyi

[Drakla]

Yep, just get rid of the stripslashes. I tend to use mysql_escape_string instead of addslashes, but it's seemingly just an alias. You can also shove a file straight into mysql like this:

$tempName=mysql_escape_string($tempName);	//GAH!  This is the key to all LOAD_DATA probs

		$query="INSERT INTO files (filename,filetype,data) VALUES ('$fileName','$fileType',LOAD_FILE('$tempName') )";

The comment is aimed at mySelf and all the trouble I had with it at the time.