BUG Char <slash> and <dbl-quote> in PO

[Anon]

Hi!

I've noticed strange behaviour: when I type one of these characters (\") into some form that is processed by PHP-script via POST-request, these characters are prepended by one more "\" (like C string escaping).

Is it normal? (doubt so)
Workarounds?

Try searching for string "\ on this site. It will say that there are no matches (of course!), but the search string will be \"\ now.

P.S. Hope it won't prepend \ in this message 😉

[[deleted]]

Is it normal? yes.
Workarounds: none.
Solution: stripslashes()

[Anon]

Why is it so normal? (I've checked quite many places that use PHP - almost all of them fail on that)

[Anon]

Workarounds: Yes

Run in the beginning of script:

$temp = $HTTP_POST_VARS;
foreach($temp as $name=>$value)
{
$HTTP_POST_VARS[$name] =
stripslashes($value);
$GLOBALS[$name] =
stripslashes($value);

}

[[deleted]]

Because you can't sent quotes through form data.
You allways need to escape them before sending (done auto by the browser)
and in your script, many times you want them escaped too (to be stored in a file or database, or printed inside an HTML page).

Thus, normal. 🙂

[Anon]

I wouldn't exactly agree... I'd say that it is normal to operate with "real" contents in PHP variables. In this case it would be my problem to convert it later to (who knows which) acceptable format for HTML (htmlspecialchars()), DB, or whatever...

Getting philosophical... 🙂

[[deleted]]

Well, like I said, having it escaped is just easier because most operations are done with escaped data anyway.

But I agree it would be more consistent if the data was in the PHP vars exactly as it was typed in the forms.