mysql_real_escape_string

[Cless]

Hello.

 

Recently I have been using mysql_real_escape_string, which prevents SQL Injections. There is only one problem, it add a \ to any quote. Although this is HOW it prevents database attacks, it gets pretty annoying. Is there a way to remove that slash when you output (display) the data?

 

Thanks!

[kenrbnsn]

Use the stripslashes() function.

 

Ken

[micah1701]

are you sure you're not using addslashes() or using the escape_string() twice?

 

while mysql_real_escape_string() adds slashes to the query statement string, they shouldn't be stored in the database that way...

[Cless]

No, I'm not using any of them twice. :S

 

Any ways, the function worked!

 

Thanks to both of you.

[MadTechie]

a bit of a shot in the dark here, are magic_quotes on ?

try this

 

if (!get_magic_quotes_gpc()) {
    $lastname = addslashes($_POST['lastname']);
} else {
    $lastname = $_POST['lastname'];
}

 

 

but to resolve the problem

Use the stripslashes() function.

 

Ken