Cleaner Way To Replace Apostrophoes And Quotes .. ?

[spacepoet]

Hello:

 

I am currently using this method to make sure all apostrophe/quotes characters entered into my Rich Text Editor get displayed properly - meaning they do not get stripped away of have a "\" slash added to them:

 

add-page.php

include("../include/mm-code-lib.php");
...

$myPageContent = mysql_real_escape_string(str_replace(array('\'', '"'), array(''', '"'), $_POST['myPageContent']));

...

 

mm-code-lib.php

if(get_magic_quotes_gpc()) {
$_POST = array_map('stripslashes',$_POST);
$_GET = array_map('stripslashes',$_GET);
$_COOKIE = array_map('stripslashes',$_COOKIE);
}

 

Is there a cleaner/better way to do this? I am use the FCK Editor, which sometimes seems to overwrite how a user enters text, and this is the only way so far I have been able to make it work.

 

Thanks!

[jcbones]

You should store all data as the user has entered it. Then run it through htmlentities (with the ENT_QUOTES flag) before displaying.