[Resolved] Double Quotes printing problem

[Fergal_O_Hanlon]

Hi Guys,

Once again I could do with some help.

I have a mysql table with a varchar field that contains sizes in following format

5" x 7"

However, when I want to echo out this value only 5 is printed.

I thought it was that I was missing the addslashes function when I was adding the values into the table but this does not add any slashes.

Can you help me with the code to print out the full 5" x 7"

Many thanks,

Fergal.

[tsinka]

Hi,

how does the code look like ?

Thomas

[Fergal_O_Hanlon]

Hi

Heres the code to save the new details to the table. Everywhere Size is mentioned will contact a value like 5" x 3":

$name = $POST['name'];
$photo_size1 = addslashes($POST['photo_size1']);
$photo_price1 = $POST['photo_price1'];
$photo_size2 = addslashes($POST['photo_size2']);
$photo_price2 = $POST['photo_price2'];
$photo_size3 = addslashes($POST['photo_size3']);
$photo_price3 = $POST['photo_price3'];
$photo_size4 = addslashes($POST['photo_size4']);
$photo_price4 = $POST['photo_price4'];
$photo_size5 = addslashes($POST['photo_size5']);
$photo_price5 = $POST['photo_price5'];
$photo_size6 = addslashes($POST['photo_size6']);
$photo_price6 = $POST['photo_price6'];
$photo_size7 = addslashes($POST['photo_size7']);
$photo_price7 = $_POST['photo_price7'];

$add_date = date("Y-m-d");
$query = mysql_query("INSERT INTO price_category (Name, Size1, Size2, Size3, Size4, Size5, Size6, Size7, Price1, Price2, Price3, Price4, Price5, Price6, Price7, Date) VALUES ('$name', '$photo_size1', '$photo_size2', '$photo_size3', '$photo_size4', '$photo_size5', '$photo_size6', '$photo_size7', '$photo_price1', '$photo_price2', '$photo_price3', '$photo_price4', '$photo_price5', '$photo_price6', '$photo_price7', '$add_date')");
if (!$query) { die('Problem inserting new price category list into database : ' . mysql_error()); }

And heres the code to read back from table to modify contents I have just added:

$list = $_POST['category'];
$query = mysql_query("SELECT * FROM price_category WHERE RecordID = '$list'");
$data = mysql_fetch_array($query);

echo stripslashes($data["Size1"]); etc.

Thanks,

Fergal.

[tsinka]

Ok,

so you're using a form to display and modify the values ?

Something like (just a guess)

<input type="text" name="somename" value="<?PHP echo stripslashes($data["Size1"]); ?>">

You need to escape the double quotes in that case (because the value is enclosed by double quotes). So use addslashes instead of stripslashes.

<input type="text" name="somename" value="<?PHP echo addslashes($data["Size1"]); ?>">

Thomas

[Fergal_O_Hanlon]

Hi Thomas,

Thanks for yoru help.

Your assumptions were correct re the form us.

I fixed the problem by replacing addslashes with htmlspecialchars and it worked fine.

Fergal.