editing php files online - problem with quotes

[chrislive]

I am building a 'control panel' for my websites so that I will be able to maintain and manage my site from my browser. One thing I want to be able to do is to end some of the actual PHP files (eg header.php and inc.php) if needed but currently if i click the modify button it will add a \ in front of evert ". I understand the problem with having " will effect the way the coding works but is their a way to make the form that I submit keep the contents as is including " and ' etc.

at the moment im just submitting the form normally, nothing special, it then opens the file and places the new text (code) into the file

Any ideas?

[XeRoZeN]

Uhmm your confusing me..I'm making a Administration Panel also but what "Modify" button can you please restate your problem..

[LordShryku]

[man]stripslashes[/man]

[chrislive]

ok ill try again 😛

I am building an control panel to administer my site, one feature is to modify some of the php pages themselves... eg header.php

so the contents of header will print into a textfield and i can edit and then submit the form with a modify button(just labeled modify)

But the poblem is that it will add a \ in front of each " or ' so that it wont effect the script functions.

stripslashes were mention but what concerns me is that some on these pages have REAL \" that i dont want touched.. so is there a way to do this? just ensure that the code will input AS it is in the textfield... so not to add \ and not to remove existing \
??

Thanks
Chris

[LordShryku]

Well, you could turn off magic quotes. Or you could write your own function to only remove it where you want to.

function my_stripslashes($string);
   $find = array("\\'", '\"', '\\\');
   $rep  = array("'", '"', '\\');
   return str_replace($find, $rep, $string);
}

[chrislive]

ok im still learning so i may need some more help...

so if i want to strip the / from those NEWLY added and not existing /" or /' then how would i place your code into this

$headerfile = "../includes/header.php";
$footerfile = "../includes/footer.php";

if ($_POST[headerdata]!="") {

$old=file_get_contents("$headerfile");
$fp=fopen("$headerfile",'w');
$uc = $_POST['headerdata'];
fputs($fp,$uc);
fclose($fp);

}

if ($_POST[footerdata]!="") {

$old=file_get_contents("$footerfile");
$fp=fopen("$footerfile",'w');
$uc = $_POST['footerdata'];
fputs($fp,$uc);
fclose($fp);

}

[LordShryku]

Put the function in the same file or in an included file. It can be anywhere, just so long as the page as access to it. Then call it like this:

$uc = my_stripslashes($_POST['headerdata']);

[chrislive]

ok great i will give this a try later and let you know how it went 🙂

Thanks
Chris

[chrislive]

doesnt work... the page returns blank and my isp does not have logging or errors turned on...

is the coding correct???

[LordShryku]

Turn on the error reporting by putting [man]error_reporting/man; at the top of the script.

[chrislive]

it doesnt show anything... still blank screen...

can you double check the code for me? if it does what you say it will be perfect..

I notice you have a closing } bracket.. but no open { bracket... maybe you missed out? this could be causing the problem??

[chrislive]

ok this is what i got to:

function my_slashes($content) {
   $find = array("\'", '\"');
   $rep  = array("'", '"');
   return str_replace($find, $rep, $content);
}

and it works to a point...

but the one that you have have three sets... if i have the three you said the page wont load.. (can someone else test that??)

so now " and ' work fine however.. those that have \" that are GENUINE like my print "<font size=\"3\">";
come out as \"

which i guess the third replace statement would fix IF it worked...

why cant I have three? whats the solution?? 🙁

Thanks for your help so far its been great.. just not quite there yet...