Posting string with " in it ...

[sturoy]

I have a page which takes input from a form, this gets POSTed to another page, where the user can check their info... for this page they can either go back to the last page, or they can insert it into the DB...

When the variable contians a string such as:

'This is the "cool" string'

in the second page, the " are printed. When posting it back to the previous page, I then use stripslashes($string) but the string is cut off at the first "

HOw can I ensure that the " are maintained in the string!?! I have read lots about magic_quotes_gpc (which, by the way, is ON) and addslashes(), but I can't seem to get it working...

Any help, ? Many thanks...

[rehfeld]

<input type="text" value="i am the text and look, i have "quotes" too. this messes up the html. look at your html source code to see the entire string is really there, but the browser gets confused">

look at htmlentites()

[devinemke]

[man]htmlspecialchars[/man]

[Frederick]

echo "<input tye=\"text\" name=\"name\" value=\"".HTMLSPECIALCHARS($value)."\" size=\"50\">\n";

[sturoy]

Thanks for your help... but I just can't get it working!!! It works for single quotes, just not double quotes...

I know it is not the right way to go about things, but deadlines are looming, so I'm just gonna not let people use double quotes or special chars.. 🙂

Maybe if I get time later on, I'll have a proper dig through my code!!

[Frederick]

Try reversing the action instead of adding it to the form field.

$title = $_POST["title"];
$title = HTMLSPECIALCHARS($title);

$sql = mysql_query("INSERT INTO tablename (title) VALUES ('$title')") or die (mysql_error());

[laserlight]

[/quote]but I just can't get it working!!! It works for single quotes, just not double quotes... [/QUOTE]
It should work for double quotes, not single quotes, by default.
Provide an example of what you have tried.