note 68322 added to function.htmlentities

Unfortunately, there are differences between what is shown in the preview window and what is shown on the web site; thus, the extreme number of backslashes in my former note. The corrected note: The data returned by a text input field is ready to be used in a data base query when enclosed in single quotes, e.g. <?php mysql_query ("SELECT * FROM Article WHERE id = '$data'"); ?> But you will get problems when writing back this data into the input field's value, <?php echo "<input name='data' type='text' value='$data'>"; ?> because hmtl codes would be interpreted and escape sequences would cause strange output. The following function may help: <?php function deescape ($s, $charset='UTF-8') { // don't interpret html codes and don't convert quotes $s = htmlentities ($s, ENT_NOQUOTES, $charset); // delete the inserted backslashes except those for protecting single quotes $s = preg_replace ("/\\\\([^'])/e", '"&#" . ord("$1") . ";"', $s); // delete the backslashes inserted for protecting single quotes $s = str_replace ("\\'", "&#" . ord ("'") . ";", $s); return $s; } ?> Try some input like: a'b"c\d\'e\"f\\g&x#27;h to test ... ---- Server IP: 217.13.201.10 Probable Submitter: 80.145.120.5 ---- X-Spam-Status: No, hits=4.0 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER, HTML_50_60,HTML_MESSAGE autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/function.htmlentities.php Edit -- http://master.php.net/note/edit/68322 Del: integrated -- http://master.php.net/note/delete/68322/integrated Del: useless -- http://master.php.net/note/delete/68322/useless Del: bad code -- http://master.php.net/note/delete/68322/bad+code Del: spam -- http://master.php.net/note/delete/68322/spam Del: non-english -- http://master.php.net/note/delete/68322/non-english Del: in docs -- http://master.php.net/note/delete/68322/in+docs Del: other reasons-- http://master.php.net/note/delete/68322 Reject -- http://master.php.net/note/reject/68322 Search -- http://master.php.net/manage/user-notes.php