PHP - Replacing Quotes In Submitted Forms

A problem has arisen which puzzles me. I have forms which save data to MySql and retrieve it, showing it as the default data in the form. Naturally I escape any quotes before sending it to the database and remove the slashes when I retrieve it. But the form HTML code shows the data like this value="$variable" which is fine when only single quotes are used in the data but causes a problem when the user uses double quotes. So data of John \"Jack\" Smith would be output as value="John "Jack" Smith" with obvious problems. If I use value='...' then that would cause problems with single quotes.

I haven't seen the answer in any of my books. The only things I can think of is changing all double quotes to single before saving to DB or converting them with htmlspecialcharacters so they are no longer actual quotes.

Hi There,

Is there any way that when a user submits a form, but places a link inside - for example:

It is located at this location:
http://mylink.com

Is there any way that PHP can pick up the fact that there is a link there and tag it correctly so it is clickable?

Cheers
Matt

Hi There,

I am putting a form together that when submitted, pumps data in to an SQL DB. However I am having problems with quotation marks - for example, it's and her's and thier's cause an error, because the insert statement takes the quote as the end of the row.

How can PHP handle this so that it either removes, or replaces that quote?

Thanks
Matt

Hi... I'm trying to make a form to edit a database entry that will be pre-populated with the current contents of the row being modified. Unfortunately, I only seem to be able to get it to pre-populate with the first word in each field (as in, if I had "two words" in a field, what would show up in my form is the word "two").

I've spent quite a while poking around on the web, and I'm 75% certain that my problem has something to do with my use/positioning of quotes, since that frequently seems to cause just this issue in just this situation, but none of the solutions I've found seem to help... Any advice would be much appreciated, I'm thoroughly stuck.

Code is currently as follows:
<?php
require("dbinfo.php");

$con = mysql_connect("localhost", $username, $password);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db($database, $con);

$result = mysql_query("SELECT * FROM main WHERE id='$_POST[id]'");

while($row = mysql_fetch_array($result))
  {
  echo "<form action='update.php' method='post'>";
  echo "<input type='hidden' name='id' value=".$_POST['id']."><br>";
  echo "Name: <input type='text' name='name' value=".$row['name']."><br>";
  echo "Type: <select name='type' value=".$row['type'].">
<option value='Food Pantry'>Food Pantry</option>
<option value='Food Pantry'>Soup Kitchen</option>
<option value='Food Pantry'>Shelter</option>
<option value='Food Pantry'>Other</option></select><br>";
  echo "Address: <input type='text' name='address' value=".$row['address']."><br>";
  echo "State: <input type='text' name='state' value=".$row['state']."><br>";
  echo "Phone: <input type='text' name='phone' value=".$row['phone']."><br>";
  echo "E-mail: <input type='text' name='email' value=".$row['email']."><br>";
  echo "Website: <input type='text' name='website' value=".$row['website']."><br>";
  echo "Hours: <input type='text' name='hours' value=".$row['hours']."><br>";
  echo "Requirements: <input type='text' name='requirements' value=".$row['requirements']."><br>";
  echo "Additional Information: <input type='text' name='additional' value=".$row['additional']."><br>";
  echo "<input type='submit' />";
  echo "</form>";
  }

mysql_close($con);
?>

Hi All,

I have a html form that I can submit using php, which then enters information into a database. This works fine when the text is just standard text - for example "the cat is on the mat". But if I put in "the cat's on the mat" - then the speach mark throws an error up!

Is there any way around this?

Thanks
Matt