[RESOLVED] ereg backslash trouble

[Shawazi]

Entering this code makes it echo if a / < or > is added.

if (ereg("[/<>]+") echo "Bad";

When I change it to:

if (ereg("[\\/<>]+") echo "Bad";

It errors if I use the previous characters AND \ ' ". I know it should detect the backslash because I escaped it, but why is it detecting the apostrophes and quotes?

[NogDog]

What data are you checking with your ereg()'s? If it's form data, you may have "magic quotes" enabled on your system, in which case any quotes are automatically be escaped with back-slashes. You might want to do something like:

$text = (get_magic_quotes_gpc()) ? stripslashes($_POST['field']) : $_POST['field'];
if(ereg("[\\/<>]+", $text)
{
   // it's bad
}

[Shawazi]

Ah yeah I don't know why I didn't think of that. Thanks