alternative to magic quotes? (I think this is an easy one)

izbryte

I have an email form where the body is HTML and the form field loads some variables within the body.
For example (simplified):

$body = '<html>
<head>
<body>' . $bodyText . '

</body>
</html>';

This then loads into a mySQL database. I'm struggling with errors because of the magic quotes and I know there's a better way then to backslash every ' but I can't find it. Can anyone help me?

ClarkF1

Turn magic quotes off and then run mysql_real_escape_string() on all the variables you are submitting to the database

izbryte

Sorry, I'm a bonehead and need more details. How do I then handle the qotes? Obviously this isn't right:

 $bodyText = mysql_real_escape_string($_POST[bodyText]);
$body = '<html>
<head>
<body>I'm a bone head' . $bodyText . '

</body>
</html>';

ClarkF1

I thought you were inserting information into a database.

If you're just displaying the information from a form posting use stripslashes to remove the slashes if you're using magic quotes

izbryte

Sorry I'm confusing. I am inserting into a database. It's a newsletter tool. I insert both $body and $bodyText into the database so they later can be either sent or edited.