Stripslashes + SQL Server

[obrienkev]

Hi all,

How do I use stripslashes for MS SQL Server?

Here's my function to add slashes...

/******************************************
Format surname for DB
******************************************/
function addslashes_mssql($input){
    if (is_array($input)) {
       foreach($input AS $id => $value) {
           $input[$id] = addslashes_mssql($value);
       }
    } else {
       $input = str_replace("'", "''", $input);   

    }
    return $input;
}

// Call Function
$surname_mgr = addslashes_mssql($surname_mgr);

$surname_sup = addslashes_mssql($surname_sup);

$surname_acc = addslashes_mssql($surname_acc);

[jheitz]

Seems like your function will replace all single quotes with double single quotes. I presume you do this to avoid problems with the single quotes when INSERTING data into the SQL Server tables (eg: you will transform "O'brian" into "O''brian" which will be ok for your INSERT/UPDATE).

Now, when you read the value from the database, there will be no double single quotes (eg: "O''Brian" will be inserted as "O'Brian"), so I don't think you really need to revert the process...

[MarkR]

Using stripslashes is usually indicative of you doing something wrong. Strings are usually stored as-is in the database hence there is no need to ever call stripslashes().

Mark

[jheitz]

Yes, if you manage to use BIND variables, you don't need to use your function. However, if you just construct your INSERT or UPDATE statements using variable names, you need a function such as this one...