Help with magic quotes

Dealing with magic quotes - they're driving me mad!

[BlueScreen]

Hi,

If someone could help me with this I'd be really apreciative. I am having problems with magic quotes. My script works fine on a server without them, but I need to use it on a server with them turned on as well. My problem is, I have a field where the admin can use PHP and it is eval'd when being output. My problem is, if something such as this is entered

echo 'This is BlueScreen\'s test';

Which is normally fine PHP, the magic quotes turns it to this when storing to the DB

echo \'This is BlueScreen\'s test\';

Which breaks it. Now, the only suggestion I have been given is to strip the slashes, but this results in

echo 'This is BlueScreen's test';

So the PHP doesnt work. Any ideas on how to rectify this and make the output to the DB be this

echo 'This is BlueScreen\'s test';

Which is what is originally typed in?

Thanks a lot :)

[Timotheos]

I've seen this

set_magic_quotes_runtime(0); [us2.php.net]

at the top of some scripts that are widely distributed.

[BlueScreen]

Hi, thanks - I've tried putting that at the top of my admin script, but it is still putting the / in front of every ' and breaking my PHP

Any other ideas?

[ergophobe]

Is this form input? In that case you may need to set magic_quotes_gpc, which can't be done at runtime, but can be done in .htaccess

php_flag magic_quotes_gpc Off¦On

[JasonHamilton]

magic quotes are your best friend.

When dealing with a database, don't worry about it. It will automatically escape quotes and thus you don't need to addslashes to any input.

When you output the data, you just need to stripslashes to get rid of the escaping.

Simple as that.

[ergophobe]

See also this thread on Magic Quotes [webmasterworld.com]

[lcp2000]

Haven't actually tried this, but how about using ANSI character codes:

echo "This is BlueScreen\s test";

Just a thought...