backslashes or no backslashes

[jakebur01]

i am posting the following data , should i add trim() around them and add backslashes? they are being posted to the page where i am checking all the fields before storing the data.

   $username = $_POST["username"];
		   $email = $_POST["email"];
		   $pass1 = $_POST["pass1"];
		   $pass2 = $_POST["pass2"];
		   $secure = $_POST["secure"];
		   $agree = $_POST["agree"];

[quincewyss]

I've always used single quotes on $_POST

i.e.

$forCount = $_POST['fc'];

 

hope this helps!

Quince

[rhodesa]

Before storing the values into mysql, use mysql_real_escape_string(). It will add any necessary slashes.

 

$email = mysql_real_escape_string($_POST["email"]);

[jakebur01]

thanks, should i use single or double quotes with $_POST?

[rhodesa]

Both will work. I too tend to use single quotes for array keys.

[kenrbnsn]

It doesn't matter if the index is a static string (single quotes are a little faster than double quotes).

 

Ken