[SOLVED] Line breaks

[Dane]

Hey guys.

 

I am using mysql_real_escape_string and htmlentities

 

$var = mysql_real_escape_string(htmlentities($row['body']));

 

But when i enter a line break in my database <br />

 

It comes up with stuff like <br />/r/n

 

How can i add breaks into the data ill pulling out?

 

Thanks

[Dane]

<br />

 

is what i enter

[PHP_PhREEEk]

You can try nl2br

 

http://us2.php.net/manual/en/function.nl2br.php

 

PhREEEk

[revraz]

nl2br ?

[Dane]

$var = nl2br(mysql_real_escape_string(htmlentities($row['body'])));

 

returns

 

<br />\r\n

 

im using bbcode aswell..

[Wes1890]

Just do a simple substr()

 

$var = mysql_real_escape_string(htmlentities(substr("\r\n","<br />",$row['body'])));

 

It replaces \r\n with <br />

[PHP_PhREEEk]

You said your <br's were getting turned into newlines on the way into the db. nl2br should re-convert it back when the data is pulled out. You don't need to do MRES or htmlentities on the info coming back out. It should have been sanitized on the way in.

 

Kind of like addslashes going in, strip them coming out. you wouldn't addslashes going in, then addslashes again when you pull the data out.

 

PhREEEk

[Dane]

ok, thanks, think its sorted

[Dane]

So to conclude this and to stop any sql injection...

 

what would be the best way to input into the database

 

htmlentities

mres

addslashes

stripslashes?

 

thanks

[Wes1890]

Just mysql_real_escape_string() should work to prevent mysql injection

[Dane]

Awesome, thanks for all ur help guys <3