Sorting input before mysql insertion

[graham23s]

Hi Guys,

 

i'm having a bit of trouble with the proper way to do this! i have a description field where users can write a description about themselves say:

 

<?php
$des = $_POST['description'];
?>

 

i was wanting to write a small function to do all the usual stuff! stripslashes,nl2br etc but im not sure what i need to do in regards to making the input ready? i need new lines to be breaked instead of \n\r

 

can anyone advise me on the functions i would need to make the input safe and ready! i know i need mysql_real_escape_string.

 

cheers guys

 

Graham

[LooieENG]

mysql_real_escape_string(htmlentities($_POST['description'], ENT_QUOTES))

 

And when you output it, use nl2br($string)

[Barand]

Write to the db with the \r\n. That way you can can put it straight back into a textarea for later editing.

 

As LooieENG said, only use nl2br when outputting to the page body.