[milf]

I use PHP to add news entries and allow others to post comments on my website. The visitors can enter text in to a form and submit it for addition to a page. The problem I've found is that when I write the information to the file, single and double quotes are automatically escaped and I'm not sure how to prevent it from doing so. There is no reason for the quotes to be escaped. I'm using fwrite to write the string to a file handle. How do I stop PHP from automatically adding the \'s???

[Simon Mundy]

Originally posted by milf:
I use PHP to add news entries and allow others to post comments on my website. The visitors can enter text in to a form and submit it for addition to a page. The problem I've found is that when I write the information to the file, single and double quotes are automatically escaped and I'm not sure how to prevent it from doing so. There is no reason for the quotes to be escaped. I'm using fwrite to write the string to a file handle. How do I stop PHP from automatically adding the \'s???

$string = stripslashes($string);

[milf]

Where do the slashes come from in the first place though? Are they automatically added by php? And if so, when, why, and how?

[milf]

Okay, I did a little more research and finally found my answer. PHP auto adding slashes is a feature built in to the language. It automatically adds slashes to data submitted as HTML form data or cookies. That, to me, is annoying, although I'm sure there are plenty of people that such a feature benefits. Thankfully, there is a way to turn this feature of. In the PHP.ini file, there is an option for magic_quotes_gpc. If this is on, everything is automatically escaped (slashed). Otherwise, if it is off, things will be as normal.

Just thought I'd pass the information along for other curious minds.