Stripslashes from all $_POST ??

[theworldisflat]

Hey, I'm doing this massive online application for a school. I've broken it down to seven pages with at least 20 user input vars per page.

The problem is when people type a '. I thought about doing stripslashes() on all the vars, but that would be tedious!

I've been searching for a way to loop through the $_POST[] var but every way I come up with changes the names of the vars, while I need them to remain with the same name.

For example, the user inputs here:
<input type='text' name='computerSkills' value='$computerSkills'>

When the user inevitably types, "I don't have any," the next time they come back to the page they see, "i don," in that field.

I was thinking of changing it to value=\"$computerSkills\" but then they would see, "I don\'t have any." I would like to get rid of the slashes all together, but there are so many and I thought there may be a function that keeps $computerSkills named $computerSkills. Any suggestions?

[laserlight]

In the case of mysql, \' escapes the single quote, and so helps avoid SQL injection.

You could set magic_quotes_gpc to 0, but then you'll have to make sure that single quotes used in SQL queries are escaped, either by using \' or by doubling the single quote, i.e. ''

Another way would be to use stripslashes on output.