Connecting Tech Pros Worldwide Forums | Help | Site Map

problems with saving and retrieving data with new line (\n and \r\n)and slashes from mysql database

JM
Guest
 
Posts: n/a
#1: Jan 13 '07
Before storing information from a form in database I perform follwing
operations on it :
$path =
mysql_real_escape_string(strip_tags(trim(urldecode ($_POST['path']))));
$summary =
mysql_real_escape_string(strip_tags(trim(urldecode ($_POST['summary']))))

When I look in database I see '\r\n' in the text for the summary
wherever I pressed return-key.
When i retrieve the information from database and display it on webpage
'\r\n' is displayed even when I use
nl2br or
str_replace("\r\n", "<br/>", $content) or
str_replace(array("\r\n", "\n", "\r"), "<br>", $text) or
preg_replace("/\r\n|\n|\r/", "<br>", $text)
the '\r\n' is replaced with a <br>.
How is the possible ? The functions work when I let them handle a string
like "A little bit of\r\ntext".

A folder is stored as 'H:\\\\My Pictures\\\\Anemone.jpg' in the
database. When I want to display the folder I use the function
stripslashes first but then I still get 'H:\\My Pictures\\Anemone.jpg'.
Why should I apply stripslashes twice ?

Hope you can help me,

JM!

Koncept
Guest
 
Posts: n/a
#2: Jan 14 '07

re: problems with saving and retrieving data with new line (\n and \r\n)and slashes from mysql database


In article <Haadnd6dl8LDhjTYRVnyigA@scarlet.biz>, JM <reply@group.svp>
wrote:
Quote:
Before storing information from a form in database I perform follwing
operations on it :
$path =
mysql_real_escape_string(strip_tags(trim(urldecode ($_POST['path']))));
$summary =
mysql_real_escape_string(strip_tags(trim(urldecode ($_POST['summary']))))
>
When I look in database I see '\r\n' in the text for the summary
wherever I pressed return-key.
When i retrieve the information from database and display it on webpage
'\r\n' is displayed even when I use
nl2br or
str_replace("\r\n", "<br/>", $content) or
str_replace(array("\r\n", "\n", "\r"), "<br>", $text) or
preg_replace("/\r\n|\n|\r/", "<br>", $text)
the '\r\n' is replaced with a <br>.
How is the possible ? The functions work when I let them handle a string
like "A little bit of\r\ntext".
>
A folder is stored as 'H:\\\\My Pictures\\\\Anemone.jpg' in the
database. When I want to display the folder I use the function
stripslashes first but then I still get 'H:\\My Pictures\\Anemone.jpg'.
Why should I apply stripslashes twice ?
>
Hope you can help me,
>
JM!
<snip>
magic_quotes_runtime boolean

If magic_quotes_runtime is enabled, most functions that return data
from any sort of external source including databases and text files
will have quotes escaped with a backslash.
</snip>

See get_magic_quotes_gpc() in the docs.

You can easily add code to account for this possibility:
get_magic_quotes_gpc() && $str = strip_tags( $str );

I'm also willing to bet that your line breaks are currently double
escaped e.g. "\\r\\n".

--
Koncept <<
"The snake that cannot shed its skin perishes. So do the spirits who are
prevented from changing their opinions; they cease to be a spirit." -Nietzsche
JM
Guest
 
Posts: n/a
#3: Jan 15 '07

re: problems with saving and retrieving data with new line (\n and \r\n)and slashes from mysql database


Koncept wrote:
Quote:
In article <Haadnd6dl8LDhjTYRVnyigA@scarlet.biz>, JM <reply@group.svp>
wrote:
>
Quote:
>Before storing information from a form in database I perform follwing
>operations on it :
>$path =
>mysql_real_escape_string(strip_tags(trim(urldecod e($_POST['path']))));
>$summary =
>mysql_real_escape_string(strip_tags(trim(urldecod e($_POST['summary']))))
>>
>When I look in database I see '\r\n' in the text for the summary
>wherever I pressed return-key.
>When i retrieve the information from database and display it on webpage
> '\r\n' is displayed even when I use
>nl2br or
>str_replace("\r\n", "<br/>", $content) or
>str_replace(array("\r\n", "\n", "\r"), "<br>", $text) or
>preg_replace("/\r\n|\n|\r/", "<br>", $text)
>the '\r\n' is replaced with a <br>.
>How is the possible ? The functions work when I let them handle a string
>like "A little bit of\r\ntext".
>>
>A folder is stored as 'H:\\\\My Pictures\\\\Anemone.jpg' in the
>database. When I want to display the folder I use the function
>stripslashes first but then I still get 'H:\\My Pictures\\Anemone.jpg'.
>Why should I apply stripslashes twice ?
>>
>Hope you can help me,
>>
>JM!
>
<snip>
magic_quotes_runtime boolean
>
If magic_quotes_runtime is enabled, most functions that return data
from any sort of external source including databases and text files
will have quotes escaped with a backslash.
</snip>
>
See get_magic_quotes_gpc() in the docs.
>
You can easily add code to account for this possibility:
get_magic_quotes_gpc() && $str = strip_tags( $str );
>
I'm also willing to bet that your line breaks are currently double
escaped e.g. "\\r\\n".
>
If I take get_magic_quotes_gpc() into consideration it now works fine
except for line feeds and carriage returns.

if (get_magic_quotes_gpc()) {
$sq = stripslashes($_POST['Summary']));
} else {
$sq = $_POST['ShortDesc'];
}
$Summary = mysql_real_escape_string(strip_tags(trim(urldecode ($sq))));

This code works for quotes en uri's. But whatever combinations I've
tried including using nl2br on storing and/or retrieving. It doesn't
work for line feeds and carriage returns.
Either \r\n is displayed on webpage or rn.

How to correctly store and retrieve input from a textarea (with LF and
CR) in MySQL ?

JM
Carl Pearson
Guest
 
Posts: n/a
#4: Jan 16 '07

re: problems with saving and retrieving data with new line (\n and \r\n)and slashes from mysql database


Try this: http://www.michikono.com/code/DbSafe/DbSafe.php
Closed Thread