[RESOLVED] PHP turns apostrophe into \'

[zah]

I'm using the following code to allow a user to create/edit a file, it's an "About Me" field, if you will.

<?php

if(isset($_POST['submit8'])) {
$content = $_POST['contents8'];
$file = fopen("users/".$user."about.php", "w");
fwrite($file, $content);
fclose($file);
}
?>

<form name="edit" method="post">
<textarea name="contents8" cols="45" rows="9">
         <?php
                $file = "users/".$user."about.php";
                $open = fopen($file, "r");
                $size = filesize($file);
                $count = fread($open, $size);

            echo($count);
    ?>
</textarea><br />
    <input type="submit" name="submit8" value="Update">
</form>

If the user types something like "I'm", it comes out on their page as "I\'m." I'm wondering how this can be fixed so that apostrophes come out as ' instead of \', and quotation marks come out as " instead of \". This is not a field being stored in a database, it's being stored in an actual PHP file in the users directory, so stripslashes(); doesn't work. Thanks for any help!

[laserlight]

Alter php.ini such that magic_quotes_gpc is set to Off, then restart the webserver.

[zah]

laserlight;10914056 wrote:

Alter php.ini such that magic_quotes_gpc is set to Off, then restart the webserver.

I don't host my own website, and I use Yahoo! Webhosting. I don't think they give me access to alter the php.ini file. :queasy:

[laserlight]

zah wrote:

I don't host my own website, and I use Yahoo! Webhosting. I don't think they give me access to alter the php.ini file.

Your host may allow you to have your own configuration file. If not, pressure them to allow this and/or change their php.ini setting.

Okay, I will admit that you can use [man]stripslashes[/man] if you must, in conjunction with [man]get_magic_quotes_gpc[/man], but magic_quotes_gpc is evil, so you should pressure your host before biting the bullet.

[zah]

laserlight;10914058 wrote:

Your host may allow you to have your own configuration file. If not, pressure them to allow this and/or change their php.ini setting.

Okay, I will admit that you can use [man]stripslashes[/man] if you must, in conjunction with [man]get_magic_quotes_gpc[/man], but magic_quotes_gpc is evil, so you should pressure your host before biting the bullet.

I'll try and pressure my host, but where would I use stripslashes in that code?

[laserlight]

zah wrote:

but where would I use stripslashes in that code?

From the looks of it, you should add:

if (get_magic_quotes_gpc()) {
    $content = stripslashes($content);
}

after:

$content = $_POST['contents8'];

By the way, instead of this:

$file = fopen("users/".$user."about.php", "w");
fwrite($file, $content);
fclose($file);

you can write:

file_put_contents("users/".$user."about.php", $content);

and instead of this:

$file = "users/".$user."about.php";
$open = fopen($file, "r");
$size = filesize($file);
$count = fread($open, $size);

you can write:

$count = file_get_contents("users/".$user."about.php");

[Kudose]

I wrote this bit a code a while ago to mimic turning off magic quotes in $_POST ... maybe it will help you.

if((int)ini_get('magic_quotes_gpc') == 1){
  function removeSlashes($data){
    if(is_array($data))
      foreach($data as $key => $value)
        if(is_array($data[$key]))
          $data[$key] = removeSlashes($value);
        else
          $data[$key] = stripslashes($value);
    return $data;
  }
  if(isset($_POST))
    foreach($_POST as $key => $value)
      $_POST[$key] = removeSlashes($value);
}

[zah]

I know this thread has been inactive for quite some time, but I just wanted to say that I've switched hosts, and I'm curious as to how to turn off magic_quotes. I have access to the php.ini file with my new host, hooray! Anywho, how would I turn that off?

Also, if I'm using

if (get_magic_quotes_gpc()) {
    $content = stripslashes($content);
} 

would I have to remove it or would the PHP code still work?

[laserlight]

zah wrote:

I have access to the php.ini file with my new host, hooray! Anywho, how would I turn that off?

Look for magic_quotes_gpc and set it to Off. Save php.ini and restart the webserver.