Posted by Juliette on 10/24/06 23:32

James54321 wrote:
> I dont add slashes (i dont see why anyone would) so to make things
> simpler here is the code to eneter items into the db how do i alter it
> so my db doesnt have all those backslashes ...or is that for some
> reason ie will it kill my code if it isnt there?
>
> I thought i could just tweek the db's collation (whatever that is) to
> something that doesnt add those horrible backslahes.
>
> P.S.
>
> Here's my code:
>
> if (isset($_POST['submit'])) {
> // form submitted
> // set server access variables
>
> // get form input
> // check to make sure its all there
> // escape input values for greater safety
>
> $Idea_Name = empty($_POST['Idea_Name']) ? die ("ERROR: Enter the
> Idea Name") : mysql_escape_string($_POST['Idea_Name']);
> $Category = empty($_POST['Category']) ? die ("ERROR: Enter the
> Category") : mysql_escape_string($_POST['Category']);
> $Idea = empty($_POST['Idea']) ? die ("ERROR: Enter the Idea") :
> mysql_escape_string($_POST['Idea']);
>
> // open connection
> $connection = mysql_connect($host, $user, $pass) or die ("Unable to
> connect!");
>
> // select database
> mysql_select_db($db) or die ("Unable to select database!");
>
> $date = date("Y-m-d");
> $time = date("H:i:s",(time()+6*3600));
> $ip = $_SERVER['REMOTE_ADDR'];
>
> // create query
> $query = "INSERT INTO ideas (Idea_Name, Category, Idea, Date, Time,
> IP_Address) VALUES
> ('$Idea_Name','$Category','$Idea','$date','$time','$ip')";
>
> //replace sites with your table name
> //replace address and description with the filed name
>
> // execute query
> $result = mysql_query($query) or die ("Error in query: $query.
> ".mysql_error());
>
> // print message with ID of inserted record
> echo "New record inserted at $time it will now go to the
> approvers";
>
> // close connection
> mysql_close($connection);
> }
>
> And if you need it this is where that page is on the web:
> http://flavouredcandy.com/addideas.php
>
> James.
>


Go back to Erwin's post and read this:

> 1) magic_quotes_gpc is on.

I.e. have a look at your php config settings using phpinfo()

[Back to original message]