slash problem

[submarinefreak]

hi i'm submarinefreak and i'm from holland,

i ocured this problem when i put my site online:

 

i build a system where i can change messages using tinymce, and then is wil be put in the database.

but the minute i pres my submit button, everywhere there are slahses (//) coming...

 

does anyone know the answer to this problem?

 

greetings from holland

[TeddyKiller]

It's hard to help you, without duplicating the problem.

Does your webserver or whatever your running the site online with, support PHP ?

[submarinefreak]

yea it does, everything else works i only have that problem...

 

greetz

[TeddyKiller]

Could you post the code?

[the182guy]

Problems with slashes when using WYSIWYG editors like TinyMCE are common, the problem usually lies in the part of your code that is trying to escape the HTML string (which will have lots of quotes in). You can solve that by using mysqli prepared statements to insert/update the HTML content. When using mysqli prepared statements there is no need to escape your input strings because it is automatically handled for you.

[submarinefreak]

i am using a function for this:

 

it goes wrong by the MESSAGE

function updateUserById($bericht_id,$formdata) {
//voer een update uit in de database voor een bepaald bericht
$sql = sprintf("UPDATE berichten 
				SET bericht_id = '%s',
				titel = '%s',
				message = '%s'
				WHERE bericht_id = '%s'",
				MYSQL_REAL_ESCAPE_STRING($formdata['bericht_id']),
				MYSQL_REAL_ESCAPE_STRING($formdata['titel']),
				MYSQL_REAL_ESCAPE_STRING($formdata['message']),
				MYSQL_REAL_ESCAPE_STRING($bericht_id));
$result = MYSQL_QUERY($sql);
if (!$result) {
		$melding = "\t<li>bericht aanpassen is mislukt".PHP_EOL;
} else {
	$melding = "\t<li>bericht is succesvol aangepast!".PHP_EOL;
	}
return $melding;
}

 

greetz

[TeddyKiller]

1- MYSQL_REAL_ESCAPE_STRING should be lowercase. (Doesn't make a whole lot of difference, but thats the way it should be)

As for .. "\t<li>bericht aanpassen is mislukt"

What is the \t ?

[submarinefreak]

1- MYSQL_REAL_ESCAPE_STRING should be lowercase.

changed it

As for .. "\t<li>bericht aanpassen is mislukt"

What is the \t ?

 

i removed that and nothing happened so i think it was a writing error

[submarinefreak]

SOLVED!

 

in stead of using mysql_real_escape_string

i used stripslashes and now it works!

 

thanks for al the help

 

greetings from holland

[TeddyKiller]

Ah, if you had told me the slashes came from the actual strings itself then I'd of been able to tell you this