[Resolved] Hash signs and plusses

Bah__Name

In my MySQL dbase I have hash signs and plusses in some fields. When I load them into string variables the hash and plusses are being ignored in php, and everything after them.
Can I escape them or something?

Tanks

Frederick

Items used for PHP functions must use an escape to render those items.

#
\"
{
[
echo "name=\"whatever\"\n";

etc.

Bah__Name

Here is what isn't working:

print "<img src='DrawImg.php?F0=$PassVar&amp;F1=bbi3#M1x'border=0>";

THe DrawImg function (file) only receives 'bbi3' for F1. Inserting a '/' char results in DrawImg receiving 'bbi3/'

print "<img src='DrawImg.php?F0=$PassVar&amp;F1=bbi3/#M1x'border=0>";

'bbi3#M1x' is stored in a MySQL database, it will eventually be fetched and loaded into a variable, that variable will then replace the string above, so it will be more like

print "<img src='DrawImg.php?F0=$PassVar&amp;F1=$PassVar2'border=0>";

$PassVar2 will have '#' signs in it, so I think I will still have the problem. Same thing happens with '+' signs.

There must be a way.

tsinka

Hi,

try something like:

$f0 = urlencode($PassVar);
$f1 = urlencode($PassVar2);
print "<img src='DrawImg.php?F0=$f0&F1=$f1' border='0'>";

Thomas

Bah__Name

Thanks tsinka that's working.

At least, its displaying the text. But the fetch from the MySQL database I'm doing isn't. I'll have to rummage in my code for this but if you can think of possible problems off the top of your head I'd be grateful.

tsinka

Post the PHP code ... that might make it easier to find a solution ...

Thomas

Bah__Name

Sorry tsinka, there's a lot of GD in there, I don't think it would make it clearer.

Here's the sql;

$sql = "SELECT F1, F2, F3, F4, F5, F6, F7, F8, F9 FROM tblArrayNames WHERE NAME = '".$AName."'";

From here on in GD takes over and there's a bit of math.

$AName will have the '#' and '+' chars in it. I can't tell if the $sql result is empty or what. I'd better find out, its just a pain, I can't explain. I can't do echo's to the browser window or it will knacker the image. Its like working in the dark. Its hard.

tsinka

Hi,

just to test if everything is fine with the query you shoud definitively have some output:

$sql = "SELECT F1, F2, F3, F4, F5, F6, F7, F8, F9 FROM tblArrayNames WHERE NAME = '".$AName."'";
$res = mysql_query($sql) or die("SQL error: ".mysql_error());
if (mysql_num_rows($res)) {
  $row = mysql_fetch_array($res);
  print_r($row);
} else {
  echo "no rows found";
}

Create a test script if you don't want to mess around with the images.

Thomas

Bah__Name

Thank you gents.