0

Having a little problem here. I'm creating a way for users to write a blog and the system to show any blogs added to the database. This bit is all working fine except when a user is writing a blog I have given them two buttons: Add Image and Add Link. Now when clicked JavaScript kicks in and prompts the user for a URL and in the case of the link the link text as well. This all appears fine in the textarea when typing, however when inserting this into the database the single or double quotes obtain a backslash in front of them turning this: <a href='http://www.google.co.uk/'>Google</a> into this <a href=\'http://www.google.co.uk/\'>Google</a>. As you can imagine it then search the current directory for \'http://www.google.co.uk/\'.

I am pretty sure I need to add a second backslash, but I'm unsure on how I would scan the entire message and add a backslash to each and every single or double quote depending on which I use?

Thanks in advance guys!

Mike Shaw
  • 119
  • 1
  • 7
  • Would I use the stripslashes function before, after or during mysqli_real_escape_string? – Mike Shaw Jun 28 '13 at 21:53
  • Used it during: $var = mysqli_real_escape_string($link, stripslashes($_POST['icontent'])); – Mike Shaw Jun 28 '13 at 21:54
  • possible duplicate of [How to prevent SQL injection in PHP?](http://stackoverflow.com/questions/60174/how-to-prevent-sql-injection-in-php) – mario Jun 28 '13 at 22:26
  • possible duplicate of [How to turn off magic quotes in PHP configuration file? I am using XAMPP](http://stackoverflow.com/q/1748001) – mario Jun 28 '13 at 22:27

1 Answers1

1

Use stripslashes function - stripslashes

raj
  • 819
  • 5
  • 9