Convert Form Text to HTML for database

[mjurmann]

Hello there! I am trying to convert text input by a user including line breaks and ' ' to html markup so that when it is inserted in the database, the ' and line breaks are converted into code so that when the information put in the database is echoed out, it does not stop echoing right before the ' and ignore the line breaks!

Help anyone?

[Vikas Jayna]

use the [b]htmlentities()[/b] function
http://in.php.net/manual/en/function.htmlentities.php

[joshi_v]

I think addslashes() will works for you!
before passing the value to database send it as 'addslashes(value)' .while displaying again to form  use 'stripslashes(value)'
so that it will escape all the ' with backslash.

[mjurmann]

Ok, so where do I put the addslashes at?

GetSQLValueString($_POST['form_description'], "text"), Here?

[joshi_v]

GetSQLValueString??

What it is this? sorry i didn't understand you.
but i can say you can use it directly in insert query too.
see this example.

$sql="insert into table_name (id,name) values ('$id','".addslashes($_POST['name']."')";

Let us know if you still had  a problem with it please post your piece of code here . :)

Joshi.

[mjurmann]

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addlisting")) {
  $insertSQL = sprintf("INSERT INTO uploaded (type, name, URL, description, address, phone_number, email, imageURL) VALUES (%s, %s, %s, %s, %s, %s, %s, %s)",
                      GetSQLValueString($_POST['form_menu'], "text"),
                      GetSQLValueString($_POST['form_name'], "text"),
                      GetSQLValueString($_POST['form_url'], "text"),
                      GetSQLValueString($_POST['form_description'], "text"),
  GetSQLValueString($_POST['address'], "text"),
  GetSQLValueString($_POST['phone'], "text"),
  GetSQLValueString($_POST['email'], "text"),
                  GetSQLValueString($_POST['uploaded'], "text"));

I want DESCRIPTION to be the field that has the slashes applied to it. How do I write that?

[joshi_v]

I think you are using dreamweaver generated code for form insertion.anyway..


if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addlisting")) {
  $insertSQL = sprintf("INSERT INTO uploaded (type, name, URL, description, address, phone_number, email, imageURL) VALUES (%s, %s, %s, %s, %s, %s, %s, %s)",
                      GetSQLValueString($_POST['form_menu'], "text"),
                      GetSQLValueString($_POST['form_name'], "text"),
                      GetSQLValueString($_POST['form_url'], "text"),
                      GetSQLValueString($_POST['form_description'], "text"),
                  GetSQLValueString($_POST['address'], "text"),
                  GetSQLValueString($_POST['phone'], "text"),
                  GetSQLValueString($_POST['email'], "text"),
                      GetSQLValueString($_POST['uploaded'], "text"));

Replace it with this

[code]
<?php
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addlisting")) {
  $insertSQL = sprintf("INSERT INTO uploaded (type, name, URL, description, address, phone_number, email, imageURL) VALUES (%s, %s, %s, %s, %s, %s, %s, %s)",
                      "GetSQLValueString($_POST['form_menu'], "text")",
                      GetSQLValueString($_POST['form_name'], "text"),
                      GetSQLValueString($_POST['form_url'], "text"),
                      ".addslashes(GetSQLValueString($_POST['form_description'], "text")).",
                  GetSQLValueString($_POST['address'], "text"),
                  GetSQLValueString($_POST['phone'], "text"),
                  GetSQLValueString($_POST['email'], "text"),
                      GetSQLValueString($_POST['uploaded'], "text"));
?>
[/code]


Try it.

[mjurmann]

Parse error: syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /home/dogbosto/www/www/htms/addlisting_uploaded.php on line 59

Getting that error

[joshi_v]

Oh Sorry!
[code]
<?php
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addlisting")) {
  $insertSQL = sprintf("INSERT INTO uploaded (type, name, URL, description, address, phone_number, email, imageURL) VALUES ('$_POST[form_menu]','$_POST[form_name]','$_POST[form_url]', '".addslashes($_POST[form_description])."',          '$_POST[address]','$_POST[phone]','$_POST[email]','$_POST[uploaded]'));
?>
[/code]

Try this now!