don't escape quotes

awesomecheese

I have a form where peoples can submit XML and I use

$xml .= $_POST['xml'];

to store it a variable. The problem is that quotes are escaped(\"). So the XML submited is

<thing stuff="elsewise"/>

the variable would store

<thing stuff=\"elsewise\"/>

This obviously causes problems, so how can I make the "\" go away?

Thanks,
Matt

rehfeld

take a look at stripslashes()

you might also need to use htmlentities()

dewen

you may either configure the php.ini file, make a magic_quotes_gpc = Off, or use a function to stripe the "\", for example

$xml .= stripslashes($_POST['xml']);

if you are using XML and store it in database, it's always a headache to deal with quotes, &, and tags (<>)

awesomecheese

Originally posted by dewen
$xml .= stripslashes($_POST['xml']);

This worked, thanks!

MarkR

Unfortunately your "solution" will replace one type of data corruption (backslashes being spuriously inserted) with another (backslashes being spuriously removed).

I recommend this solution

if (ini_get('magic_quotes_gpc')) {
  print "Turn stupid magic quotes off"; exit;
}

Magic quotes are always wrong, don't use them, don't assume they're turned on or off, just have your application politely quit if they're on.

Mark