note 48745 added to function.addslashes

From: Date: Thu, 06 Jan 2005 02:37:02 +0000
Subject: note 48745 added to function.addslashes
Groups: php.notes 
Request: Send a blank email to php-notes+get-82808@lists.php.net to get a copy of this message
Here's a (very simple) way to determine if a string needs to be escaped by addslashes: <?php function string_needs_addslashes($str) { if (($qp = strpos($str,'\'')) !== false) { if ($sp<1 || $str[$qp-1] != '\\') return true; else return string_needs_addslashes(substr($str,$sp+1)); } return false; } ?> The theory being, if a single quote is found and is not prefaced by a slash, then the string is not safe and needs to be escaped before database entry. ---- Manual Page -- http://www.php.net/manual/en/function.addslashes.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+48745 Delete -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=bad+code Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=spam Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=useless+example Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=contains+commercial+links Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=useless+note Reject -- http://master.php.net/manage/user-notes.php?action=reject+48745&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#82808) next »