php - Where can I place addslashes coding that will allow "/',. (punctuation) to show up on the webpage -


where can place addslashes or magicquotes coding allow punctuation show when users submit data website name , city fields?

if(isset($_post['submit'])) {    $name=$_post["element_1"]; $xxx=$_post["element_2_1"]; $xxxxx=$_post["element_2_2"]; $xxxxx=$_post["element_2_3"]; $xxxxx=$_post["element_3_1"]; $xxxxxd=$_post["element_3_2"]; $xxxxxx=$_post["element_3_3"]; $xxxxx=$_post["element_4_1"]; $xxxxx=$_post["element_4_2"]; $city=$_post["element_4_3"]; $xxx=$_post["element_4_4"]; $xxp=$_post["element_4_5"]; $desc=$_post["element_5"]; //$file=$_files['element_6']; $link=$_post["element_7"]; $stdate=$stdatemm."-".$stdatedd."-".$stdateyy; $endate=$endatemm."-".$endatedd."-".$endateyy; $user=$_post["postuser"];

you need escape user-submitted content while saving database.

// var `"/'` chars $name=$_post["element_1"];  // escape database storage $name_escaped = mysql_real_escape_string($name);  // use escaped version in query mysql_query("insert table (column) values ('" . $name_escaped . "')");

note: mysql_real_escape_string() function must called after have init mysql connection, before execute mysql query.

note: way of executing mysql queries deprecated of php 5.5, therefore should use mysqli or pdo methods.

in case, when retrieving content database shouldn't escaped, therefor if want display on html page make sure use htmlspecialchars() chars "<" don't break html:

<html> <body>     <div>         <?php echo htmlspecialchars($name_fromdb); ?>     </div> </body> </html>

Comments

Post a Comment

Popular posts from this blog

c# - Send Image in Json : 400 Bad request -

from android trying send image class of data, iis webservice. (c#) the problem 400 bad request . the image being encoded base64 . , placed json rest of class elements. my guess base64 not valid inside json. server not understand it. if set string "" , post accepted fine. so question is, how make base64 valid within json array? ( tried url.encode no success). or how should send image android webservice? gson gson = new gson(); string json = gson.tojson(record); // record has param { string base64photo } how big image? i'm pretty sure surpassing iis json size limit (default 4 mb). check http://geekswithblogs.net/frankw/archive/2008/08/05/how-to-configure-maxjsonlength-in-asp.net-ajax-applications.aspx or http://www.webtrenches.com/post.cfm/iis7-file-upload-size-limits good luck!
Read more

jquery - Fancybox - apply a function to several elements -

this source code below posted cristiano g. carvalho in answer question: calling fancybox gallery other link made user. <div class="details_gallery"> <a href="#" class="manualfancybox">manual call fancybox</a> <div class="details_gallery_min"> <a rel="details" href="max/1.jpg" class="fancybox"><img src="min/1.jpg" alt="" /></a> <a rel="details" href="max/2.jpg" class="fancybox"><img src="min/2.jpg" alt="" /></a> <a rel="details" href="max/3.jpg" class="fancybox"><img src="min/3.jpg" alt="" /></a> <a rel="details" href="max/4.jpg" class="fancybox"><img src="min/4.jpg" alt="" /></a> </div> </div> <script> $(document).read
Read more

An easy way to program an Android keyboard layout app -

i program android app replaces standard keyboard 1 one-hand optimized coffee++ keyboard layout. what special problems have face in progress? guess such project go deep android core, cause keyboard such essential thing. is wise start android developer tools (adt)—eclipse plugin described in this tutorial ? or there better way achieve goal? i new android programming, firm in php, mysql , javascript , use eclipse php i guess such project go deep android core, cause keyboard such essential thing. no. can create inputmethodservice implementation of keyboard. there sample soft keyboard in android sdk installation (if chose download sample code sdk manager), , there open source input methods floating around well, such hacker's keyboard. inputmethodservice distributed part of ordinary android application, , user can elect activate input method if user chooses. is wise start android developer tools (adt)—eclipse plugin described in tutorial? that fine s
Read more