[Resolved] ' Quote problem

kcgame

Hi,
Having problems with the quotes again...really can't seem to understand

I have the following code:

echo"<input name=hide_name type=hidden value='$name_dis[0]'>";

The $name_dis[0] contains I'm ok

Then i pull out the value via:

echo"<font color=#FFFF00>$_POST[hide_name]";

Outputs I

How can i quote it so that my POST value will give me I'm ok to input into MySQL table ? I've tried the addslashes() and {} to surround the echo array but output I/ and I respectively ??Any help is greatly appreciated. Thanks.

mrhappiness

echo"<input name=hide_name type=hidden value='".addslashes($name_dis[0])."'>";

should work

kcgame

Originally posted by mrhappiness
echo"<input name=hide_name type=hidden value='".addslashes($name_dis[0])."'>";
should work [/B]

It outputs I/...I've tried the following

echo "<input name=\"hide_name\" type=\"hidden\" value=\"$name_dis[0]\">";

and it displays correctly.
Then when i changed I' ok to I" ok , it fails again...:queasy: Please help...

lazzerous

in the form use

echo"<input name=hide_name type=hidden value='".addslashes($name_dis[0])."'>";

in the submitted script, you have to remove the slashes before use:

echo"<font color=#FFFF00>".stripslashes($_POST[hide_name]);

-=Lazz=-

laserlight

Actually, this is what I recommend:
1. Use double quotes instead of single quotes to delimit your HTML element attribute values.
2. Use htmlspecialchars() on PHP variables that are used to populate these HTML element attributes.

The code would then be:

echo '<input name="hide_name" type="hidden" value="' . htmlspecialchars($name_dis[0]) . '">';

addslashes() doesnt work here as HTML does not use backslashes for escaping special characters.

Drakla

Originally posted by laserlight
Actually, this is what I recommend:
1. Use double quotes instead of single quotes to delimit your HTML element attribute values.
2. Use htmlspecialchars() on PHP variables that are used to populate these HTML element attributes.

Yes! That is THE LAW: double quotes + htmlspecialchars, especially as htmlspecialchars doesn't convert single quotes unless you ask it to do so, so don't go thinnking you can flip and use single ones.

kcgame

Originally posted by laserlight
Actually, this is what I recommend:
1. Use double quotes instead of single quotes to delimit your HTML element attribute values.
2. Use htmlspecialchars() on PHP variables that are used to populate these HTML element attributes.

The code would then be:
echo '<input name="hide_name" type="hidden" value="' . htmlspecialchars($name_dis[0]) . '">';
addslashes() doesnt work here as HTML does not use backslashes for escaping special characters. [/B]

Thanks😃
So this is the confusion that's bothering me for sometime...thou the ' and " are interchangable...Well, a lesson learnt here.
Thanks again🙂