[RESOLVED] AddSlashes

[kbc1]

Hi all,

Bit of an amatuer question i think but help is needed all the same!

I need to addslashes() to the text box array that is posted on my page but not sure where is should go within my code. I have the following code:

if (isset($_POST['textarea']) && is_array($_POST['textarea'])) { 

	foreach ($_POST['textarea'] as $textid => $textarea) { 
		$q= "update mytable set textfield= '$textarea'"; 
		$r= mysql_query($q);
	}


}

If someone could amend the code or highlight where I need to apply addslashes() i would be grateful.

Thank u.

[laserlight]

Since you are using the original mysql API, you would use mysql_real_escape_string(). There is no need to use addslashes() here.

if (isset($_POST['textarea']) && is_array($_POST['textarea'])) {

foreach ($_POST['textarea'] as $textid => $textarea) {
    $query = "update mytable set textfield='" . mysql_real_escape_string($textarea) . "'";
    $result = mysql_query($query);
}

}

[kbc1]

Thank you laserlight. I'll put that i now. Cheers once again!