note 9538 added to str_replace

If you use str_replace() to manually do what addslashes() does, i.e. backslash-escape certain characters (I do that a lot, since I often need more characters escaped than what addslashes does, and in different ways than addcslashes), don't forget to escape the backslash itself FIRST, then everything else, e.g. $x = str_replace("\\", "\\\\", $x); $x = str_replace("\n", "\\n", $x); $x = str_replace("\000", "\\0", $x); etc.. http://www.php.net/manual/function.str-replace.php