[RESOLVED] Back slashes in form output

[philweb]

Hi

I was wondering if you could help me with this small problem, I have this script that works very well but it does include the \ back slash when someone types an apostrophy. Is there a way of removing this back slash so it just shows the apostrophy in the form output?

Thank you in advance,

Phil

Here is the script-

if (isset($_POST['submit'])) { // Handle the form.

$message = NULL; // Create an empty new variable.

// Check for a name.
if (strlen($_POST['name']) > 0) {
	$name = TRUE;
} else {
	$name = FALSE;
	$message .= '<p>You forgot to enter your name!</p>';
}

// Check for an email address.
if (strlen($_POST['email']) > 0) {
	$email = TRUE;
} else {
	$email = FALSE;
	$message .= '<p>You forgot to enter your email address!</p>';
}

// Check for a telephone.
if (strlen($_POST['telephone']) > 0) {
	$telephone = TRUE;
} else {
	$telephone = FALSE;
	$message .= '<p>You forgot to enter your telephone number!</p>';
}
// Check for comments.
if (strlen($_POST['comments']) > 0) {
	$comments = TRUE;
} else {
	$comments = FALSE;
	$message .= '<p>You forgot to enter your message!</p>';
}

if ($name && $email && telephone && comments  ) { // If everything's okay.
	// Register the user.
	// Send an email.

 $to = $_POST['email'];
	$message = "Thank you for your enquiry! Here is a copy of what you have submitted, we will contact you shortly.\n\nPlease do not reply to this email.\n\nYour name is '{$_POST['name']}'\n\nYour email is '{$_POST['email']}'\n\nYour telephone number is'{$_POST['telephone']}'\n\nYour comments were'{$_POST['comments']}'\n\nSincerely,\nThe Team";
	$subject = 'Your Enquiry'; // Create an empty new variable.
$headers .= 'From: [e-mail]' . "\r\n";
$headers .= 'Bcc: form@mysite' . "\r\n";

// Mail it

mail($to, $subject, $message, $headers);
		header ('Location: thank_you.php');
		exit();		
	} else {
		$message .= '<p>Please try again.</p>';		
	}

}





// Print the error message if there is one.
if (isset($message)) {
	echo '<font color="red">', $message, '</font>';
}

[Weedpacket]

It would appear you've got magic quotes turned on. Best thing to do is turn it off, because it will be going away in PHP 6 anyway because in the end it turned out to be a bad idea (the "magic_quotes_gpc" setting in php.ini).

If that isn't an option, you can use [man]stripslashes[/man]. For added robustness you can use the [man]get_magic_quotes_gpc[/man] function to see if it's turned on or off, and only use stripslashes if it is.

[philweb]

Hi

Thanks for the reply, I understand that get_magic_quotes_gpc is switched on by default and so tried the stripslashes example the link took me to. This threw up an error in my contact page.

So, do you know and how to apply a stripslashes function to the above script?

Or, if you can point me to a more easier explanation of how to do it myself.

Thanks,

Phil

[NogDog]

Simplest -- well, maybe shortest -- way I know is:

<?php
<?php
if (isset($_POST['submit'])) { // Handle the form.
   if(get_magic_quotes_gpc())
   {
      array_walk_recursive(
         $_POST,
         create_function(
            '&$value,$key',
            '$value = stripslashes($value);'
         )
      );
   }
   // rest of code
?>

[philweb]

Hi Nogdog

Thanks for the reply, but it is throwing up an error-

Fatal error: Call to undefined function: array_walk_recursive() in /home/phcleani/public_html/contact.php on line 7

Any thoughts?

Thanks,

Phil

[NogDog]

Means you're using an older version of PHP, so you'll have to use the [man]array_walk/man function instead. (Nothing else needs to be changed, but it won't work if your $_POST array is multi-dimensional, such as if you use form field names with brackets for radio/checkbox sets, for instance.

PS: You could make it work with multi-dim $_POST arrays by defining the function separately and making it recursive if $value is an array.

[philweb]

Hi Nogdog

It's all working again now, thanks for your help.

Phil