[michael1026]

So I'm inserting content into a mysqli database, but when I do, it's escaping single quotes, even though nothing in my code is making it do that. Does PDO do this automatically or something? How can I fix it? It needs to be echoed out to a page.

Edit: to commentate for this, I'm using stripslashes(), but any explanation why it's doing this in the first place?

[La Manifesto]

So I'm inserting content into a mysqli database, but when I do, it's escaping single quotes, even though nothing in my code is making it do that. Does PDO do this automatically or something? How can I fix it? It needs to be echoed out to a page.

Edit: to commentate for this, I'm using stripslashes(), but any explanation why it's doing this in the first place?

Try to insert content without using stripslashes().

[michael1026]

Wait, are you using mysqli or PDO?
Also, showing your code would actually be better.

PDO, sorry for the confusion. I don't have much code....

PHP Code


<?php 
$content = $_POST['topic_content'];
      $stmt = $dbh->prepare("INSERT INTO posts (post_content) VALUES (:content)");
      $stmt->bindParam(':content', $content);
      $stmt->execute(); 


I think it may be my host that's doing it automatically.

---

Try to insert content without using stripslashes().

I have. I used stripslashes after I found out that it was doing this to remove them.

[La Manifesto]

PDO, sorry for the confusion. I don't have much code....

PHP Code


<?php 
$content = $_POST['topic_content'];
      $stmt = $dbh->prepare("INSERT INTO posts (post_content) VALUES (:content)");
      $stmt->bindParam(':content', $content);
      $stmt->execute(); 


I think it may be my host that's doing it automatically.

---

I have. I used stripslashes after I found out that it was doing this to remove them.

You could always try addslashes(), it might work.

[michael1026]

You could always try addslashes(), it might work.

Well, right now stripslashes is working. I was just curious why this was happening in the first place. I'm just going to assume that it's the host that does it automatically.

[La Manifesto]

Well, right now stripslashes is working. I was just curious why this was happening in the first place. I'm just going to assume that it's the host that does it automatically.

Oh I wasn't clear on that. I assume it doesn't work because PDO automatically removes stuff like that when you bind them.

[themastersinner]

Sounds like you have magic_quotes turned on.

http://www.php.net/manual/en/security.ma...s.what.php
http://en.wikipedia.org/wiki/Magic_quotes