Interested to Buy Any Domain ? << Click Here >> for more details...
Answer Posted / karthi
Magic Quotes in Action
Now lets make a simple form processor to show how machines
with magic quotes enabled will escape those potentially
risky characters. This form submits to itself, so you only
need to make one file, "magic-quotes.php" to test it out.
magic-quotes.php Code:
<?php
echo "Altered Text: ".$_POST['question'];
?>
<form method='post'>
Question: <input type='text' name='question'/><br />
<input type='submit'>
</form>
This simple form will display to you what magic quotes is
doing. If you were to enter and submit the string: Sandy
said, "It's a beautiful day outside and I like to use \'s."
You would receive the following output.
Display:
Altered Text: Sandy said, \"It\'s a beautiful day outside
and I like to use \\\'s.\"
Question:
Magic quotes did a number on that string, didn't it? Notice
that there is a backslash before all of those risky
characters we talked about earlier. After magic quotes:
A backslash \ becomes \\
A quote ' becomes \'
A double-quote " becomes \"
Now say that you wanted to remove the escaping that magic
quotes puts in, you have two options: disable magic quotes
or strip the backslashes magic quotes adds.
Removing Backslashes - stripslashes()
Before you use PHP's backslash removal function
stripslashes it's smart to add some magic quote checking
like our "Are They Enabled?" section above. This way you
won't accidentally be removing slashes that are legitimate
in the future if your PHP's magic quotes setting changes in
the future.
magic-quotes.php Code:
<?php
echo "Removed Slashes: ";
// Remove those slashes
if(get_magic_quotes_gpc())
echo stripslashes($_POST['question']);
else
echo $_POST['question'];
?>
<form method='post'>
Question: <input type='text' name='question'/><br />
<input type='submit'>
</form>
Our new output for our string containing risky characters
would now be:
Display:
Removed Slashes: Sandy said, "It's a beautiful day outside
and I like to use \'s."
Question:
| Is This Answer Correct ? | 4 Yes | 1 No |
Post New Answer View All Answers
How do I run a php file?
Is php a case sensitive language?
What is mysqli_fetch_array?
When do you use define() and when do you use const. What are the main differences between those two?
Explain the difference between static and dynamic websites?
How to count all the lines of code in a directory and sub folder?
What does the expression exception::__tostring means?
Explain me what is the use of 'print' in php?
What is the default session out time?
Which Scripting Engine PHP uses?
What is php in full?
How to create and destroy cookies in php?
Difference between mysql_connect and mysql_pconnect?
What is $_ env in php?
Is multiple inheritance supported in php?
