note 48745 added to function.addslashes
| From: | josh at gitlinfamily dot com | Date: | Thu, 06 Jan 2005 02:37:02 +0000 |
| Subject: | note 48745 added to function.addslashes | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-82808@lists.php.net to get a copy of this message | ||
Here's a (very simple) way to determine if a string needs to be escaped by addslashes:
<?php
function string_needs_addslashes($str)
{
if (($qp = strpos($str,'\'')) !== false)
{
if ($sp<1 || $str[$qp-1] != '\\')
return true;
else
return string_needs_addslashes(substr($str,$sp+1));
}
return false;
}
?>
The theory being, if a single quote is found and is not prefaced by a slash, then the string is not
safe and needs to be escaped before database entry.
----
Manual Page -- http://www.php.net/manual/en/function.addslashes.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+48745
Delete -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+48745&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+48745&report=yes
Search -- http://master.php.net/manage/user-notes.php