Re: Still need help with ereg

OK, so just to be clear - this is more for dealing with MySql. If a user entered Joe"Blow and I had a query that said "insert into data $name", it may think the first quote is the end of the statement and miss Blow - or just screw the whole insert. When you want to redisplay the data - using stripslashes should get rid of this problem? One other note on this. In my ereg statement I have something like ereg(^[A-Z\']*$); this would allow uppercase letters and apostrophe's which is what I want - but it also allows the \ which I don't want. So how can I get it to allow the ' and not the \. Thanks ----- Original Message ----- From: "Jack Dempsey" <dempsejn@georgetown.edu> To: "C.R." <odcs@rogers.com>; "PHP General" <php-general@lists.php.net> Sent: Thursday, April 17, 2003 10:44 PM Subject: RE: [PHP] Still need help with ereg > magic quotes lets php escape your quotes for you. > > take the usual circumstance of a user submitting data to a php script, and > that script entering it into a database. > if the user has quotes in the data, it could create an error in the SQL > command...so, magic quotes automatically escapes these > quotes or apostrophes for you on submitting the data to a page... > > so, you submit a form with this text: > > > it's not over till it's over > > > if you have magic_quotes on, without doing anything, php will escape the > quotes, so your data will be: > > it\'s not over till it\'s over > > this is nice when you're usually going to be taking data and throwing it > into a database, but if you're not expecting it, it could > catch you unaware... > > hope this helps, > jack > > > > > -----Original Message----- > > From: C.R. [mailto:odcs@rogers.com] > > Sent: Thursday, April 17, 2003 7:06 PM > > To: PHP Windows; PHP General > > Subject: [PHP] Still need help with ereg > > > > > > I am trying to create a validation script using ereg and I'm having some > > problems. I think part of this is due to not quite understanding what the > > purpose of magic quotes is - actually this whole idea things > > being escaped > > with slashes confuses me. Could someone explain in plain english what all > > this means. Also, what is the satandard - should get_magic_quotes > > be set on > > or off in the php.ini and what are the advantages or disadvantages. > > > > Thanks > > > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > >