What are your settings for magic_quotes?
magic_quotes_gpc
magic_quotes_runtime
in your php.ini.
magic_quotes_gpc will automagically addslashes() to incoming GET, POST, and
COOKIE data. So you don't need to do it yourself. The defaults to On.
magic_quotes_runtime will autmagically addslashes() to data retrieved from a
database. This defaults to Off.
Also, note that you DO NOT have to stripslash data that comes out of a
database just because you used addslashes() on it when you inserted it. If
you have a string like What's up with the character and you use
addslashes() on it (either automatic with magic_quotes, or manually), then
you'll have the string What\'s up with the \ character When you insert
that into the database, the \ character tells the database that the
character after it should be taken as a literal character and not the end of
the string. The actual \ doesn't go into the database. If you are seeing the
\ in your database, then you are running addslashes() twice on your data.
HTH,
---John Holmes...
- Original Message -
From: Trond Arve Nordheim [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 05, 2002 6:59 AM
Subject: [PHP] Unexpected addslashes/stripslashes-behaviour?
I'm just having a little problem using addslashes/stripslashes here, and
I'm
wondering if this actually is the expected behaviour:
I get text from a form post, let's say This sucks :\.
I do $text = addslashes($_POST[fieldname]); and stick $text in a DB.
When I pull the text back out, and run stripslashes on the text, the
result is:
This sucks :.. the \ is gone...
Is it supposed to do this? As far as I've seen I need stripslashes on data
from
a DB already addslashed... so.. what's going on?
--
Trond Arve Nordheim
- This message has been ROT13-encrypted twice for extra security
-
This mail sent through IMP: http://horde.org/imp/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
