2. PHPRunner General questions
  3. dealing with ' cleaned quotes
This topic is locked

dealing with ' cleaned quotes

 		11/4/2010 8:59:44 AM
PHPRunner General questions
W
 wfcentral author

In order to finish off some hand-coded pages I had to insert some code to keep quotes from goofing up my insert mysql statements.
example:
$business_name = htmlentities($_POST['business_name'], ENT_QUOTES);
this converts
Joe's Crabshack
into
Joe & # 0 3 9 ; s Crabshack
(I had to expand out the code because the forum kept turning it into a quote...)
which goes into the database fine and displays on my website fine.
the problem is when my client goes into my phprunner pages and tries to edit the content... it shows up on the edit pages as
Joe & # 0 3 9 ; s Crabshack
which confuses them...
I managed to get it to look correct on the list page by setting view as HTML on the field properties.
can't do that on the edit page though?
Help?
Sergey Kornilov admin 11/8/2010

You need to screen single quote character adding a backslash i.e.

insert ignore into display set news_subject = 'This can\'t happen'


mysql_real_escape_string() is designed specifically for this purpose.

More info: http://php.net/manual/en/function.mysql-real-escape-string.php