Ng Hwee Hwee wrote:
hi all,
i'm really buffled by what i got and would appreciate any help possible! although i addslashes and stripslashes, i still get a backslash ( \ ) character infront of a single inverted comma ( ' ) and also whenever an amberscend ( & ) appears... please help! thanx thanx..
for example:
in my form (form.php), i have something like that:
<input type="text" name="field1" value="<? if ($form["field1"]) echo stripslashes($form["field1"]); ?>">
upon submitting the form, the verification file (verify.php) will be executed, and it has lines like that:
<? session_register("form");
foreach($_POST as $varname => $value) $form[$varname] = addslashes(trim(EscapeShellCmd($value))); ?>
... and then i'll check for the validity of field1. if there is an error, the user will be redirected back to form.php with the value that the user entered echoed with a stripslash.
if there is no error, the whole script runs well, but if the user has to be brought back to form.php, it'll print backslashes infront of characters like "( ) ' &" etc..
also, instead of having a blank text field, i have a text field with contents retrieved from the database.. the database data does not have the slashes and when the first time they appear on the screen, there is no slashes attached too.. the problem is always when the user has an error and needs to be brought back to form.php that the slashes appear and the number of slashes doubles everytime the user has to be brought back to form.php.
i have my magic_quotes_gpc set to ON in my phpinfo() and my version of php is 4.1.2.
thank you soo soo much!!
look forward to your replies.
hwee
-- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
