Annoyning slashes

saltious

Hi.

i have a text area passing to a variable.

if the text area has any ' (commas) typed in the text area i get slashes appear in my sql table.

if i put include the stripslahses function i get an error when it comes to save to the table.

anyone any ideas?

$faultdetail = mysql_real_escape_string($_POST['details']);

many thanks.

scrupul0us

well yea... you're supposed to have the slashes in your mysql table... when you output the data and use stripslashes it'll be formatted as expected

it has to use slashes as single quotes are special characters in sql that mush be escaped or slashed in data in order to prevent errors

saltious

interesting. but when i use the stripslashes like so

$sql="INSERT INTO calls (userid, datelogged, duedate, problem, priority, assigned, completed)
VALUES

($id, NOW(), '$completeby2', stripslashes('$faultdetail'), '$prio', '$autoassign', '$status')";

i get this error Error: FUNCTION helpdesk.stripslashes does not exist

anyone know why?

scrupul0us

right b/c when you do stripslashes WITHIN a query statement it tries to use functions inherit to mysql.... you must strip slashes on the variable before putting it into the query

--or--


$sql="INSERT INTO calls (userid, datelogged, duedate, problem, priority, assigned, completed)
VALUES

($id, NOW(), '$completeby2',". stripslashes('$faultdetail').", '$prio', '$autoassign', '$status')";

saltious

Sorry i completely replied to the wrong post.

ignore that but please answer my post before this.

scrupul0us

whats the follow up question... i dont follow 🙂

Installer

In this line:

$furtherDate = strtotime($daydue . ' +' . $count2 . ' days');

"$daydue" should be "$duedate" and "$count2" should be "$adddays".