sql - Trying to remove special characters in PHP -
i have form has text inputs. when add them db '\' character before each special character {', ", etc}. want remove '\' before entering text db far have been unable to. tried doing in php before execute query:
$title_str = str_replace('\'','',$_post['main_title']);
but did not work.
thanks,
sounds magic quotes still turned on. should disable them. safe thing do.
http://www.php.net/manual/en/security.magicquotes.disabling.php
also, sure use prepared queries (with pdo or similar) when inserting data in database avoid sql injection problems.
Comments
Post a Comment