[RESOLVED] mail function is adding slashes - arg!

[VisionsOfCody]

Hi

When i send a mail using the code below any apostrophes automatically get slashes

$to      = '[e-mail]';
$subject = 'A message from the site';
$message = "A message from ".$_POST['r_name']."\r\n";
$message .= $_POST['message'];
$message = wordwrap($message, 70);
$headers = 'From: ' . $_POST['r_mail'] . "\r\n" .
'X-Mailer: PHP/' . phpversion();
mail($to, $subject, $message, $headers);

I thought maybe trying to use stripslashes() but where would i put it ? - the mail function is the last step in the process

can anyone help ?

thanks

[bogu]

mail ( $to, stripslashes($subject), stripslashes($message), $headers);

[ahundiak]

It's not the mail function but the majic quotes flag that causing data inside of POST and GET to have added slashes. This is one reason why majic quotes is a bad thing.

$message = "A message from ". stripslashes($_POST['r_name']) ."\r\n";

Should work. Put strip_slashes around everything being pulled out of POST or GET.

A better approach would be to turn off majic quotes in your php.ini file or in your .htaccess file. Just be sure you use the proper escape function before inserting data into a database.

[VisionsOfCody]

ok I'll try that thanks - I thought it was the mail() function that was adding the slashes !

I can't turn off the magic quotes as I don't have server access

thanks for your replies

[ahundiak]

Assuming it's an apache server then all you need to do is to add a file called .htaccess to your server root directory with these sort of lines in them.

php_flag register_globals off
php_flag magic_quotes_gpc off
php_value display_errors off

Then use <?php echo phpinfo() ?> to confirm that flags were set properly.