Forum Moderators: coopster

Message Too Old, No Replies

PHP stripslashes not working properly

         

grimlock

7:42 pm on Aug 2, 2004 (gmt 0)

10+ Year Member



Greetings,

Everytime I edit my entries using the scripts admin interface it adds a / to everywhere i put an ' (apostrophe). I think the problem is somewhere in the code below, can you help me track this down?


if ($_GET["action"]=="edit_blog") {
// get blog from database
$con = db_connect();
$sql = "SELECT * FROM blog WHERE nIdCode=".$_GET["blogid"];
$result = mysql_query($sql,$con);
if ($result!=false) {
// show blog editing form
$row = mysql_fetch_array($result);

$html .= "<table border='0' cellspacing='1' cellpadding='2' bgcolor='#ccddee' align='left'>\n"
." <tr><td bgcolor='#ccddee' align='center'><span class='normal'><b>Edit Blog</b></span></td></tr>\n"
." <tr><td bgcolor='#ffffff' align='center'>\n"
."<form method='POST' action='".form_url("blog_exec.php?action=edit_blog")."'>\n"
." <input type='hidden' name='blogid' value='".$row["nIdCode"]."'>\n"
." <table border='0' cellspacing='1' cellpadding='2' align='center' bgcolor='#ccddee'>\n"
." <tr><td bgcolor='#ffffff'><span class='small'>Title</span></td><td bgcolor='#ffffff'><input type='text' class='text' name='title' size='75' value='".stripslashes($row["cTitle"])."'></td></tr>\n"
." <tr><td bgcolor='#ffffff'><span class='small'>Date</span></td><td bgcolor='#ffffff'><input type='text' class='text' name='date' size='50' value='".stripslashes($row["dEntryDate"])."'></td></tr>\n"
." <tr><td bgcolor='#ffffff'><span class='small'>Body</span></td><td bgcolor='#ffffff'><textarea name='body' class='text' cols='75' rows='15'>".stripslashes($row["cBody"])."</textarea></td></tr>\n"
." <tr><td bgcolor='#ffffff' colspan='2' align='right'><input type='submit' value='Make Changes' class='button'></td></tr>\n"
." </table>\n"
."</form>\n"
."</td></tr></table>\n";
}
}
}

Thanks

coopster

9:42 pm on Aug 2, 2004 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Have you checked the data in the file first to see what it looks like? I'm guessing the slashes exist in the data itself at the time you are INSERTing the rows.