Re: Filtering out \ when a ' is user entered?

Hello, I had the same problem: So I tried stripslashes.. But Queries do break if unslashed ' or " are present. and furthermore, there are many other problems .. So I created a function called "entities".. Let's imagine a user made an input of name: Simon "The Snake" surname: O'Connors you can simply call the function like this: entities($HTTP_POST_VARS); and you'll have echo $name; // will produce: Simon &#034;The Snake&#034; $surname = // will produce: O&#039;Connors /* => $description = "book's description"; => $title = "book's title "; => $arr = array("description"=>"$description","title"=>"$title"); => entities($arr); returns variables, but with entities and other things changed- ie: $title = "book&#39;s title"; $description = "book&#39;s description"; or just simply: entities($HTTP_POST_VARS) for variables passed from one page to another */ function entities($arr) { $arrct = count($arr); for(reset($arr); $key = key($arr); next($arr)) { global $$key; $$key = htmlentities($arr[$key]); $$key = stripslashes($$key); $$key = str_replace("'","&#039;",$$key); $$key = str_replace('"',"&#034;",$$key); } } It's basically something like array_walk. ----- Original Message ----- From: "Richard Lynch" <ceo@l-i-e.com> To: <php-general@lists.php.net> Sent: Wednesday, June 27, 2001 10:30 AM Subject: Re: [PHP] Filtering out \ when a ' is user entered? > > I'm pretty new to PHP but all I've seen of it so far I pretty much love! > > > > I've built a web log but when the user enters their data and they use ' > > or " (and you know they will) php always shows it from the included > > web log as > > > > \' How can I filter out these backslashes so they don't appear on the > > final public viewable page? > > You need those \ in there to store it into a database. > > If you don't use a database, you can turn MagicQuotes off in php.ini > > If you *do* use a database, you can use > http://php.net/stripslashes to strip > out the slashes. > > If, after turning off MagicQuotes, or calling stripslashes, you find you > need them back in there after all for something, you use > http://addslashes > > > -- > WARNING richard@zend.com address is an endangered species -- Use > ceo@l-i-e.com > Wanna help me out? Like Music? Buy a CD: > http://l-i-e.com/artists.htm > Volunteer a little time: http://chatmusic.com/volunteer.htm > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > >