PHP - Remove Surrounding Single Quotes Function

I have a simple form that connects to this php page. Only two variables, "ArticleDescription" & "URL". I've tried a number of things, several of which are listed below, but have had no success. I'm certain it's just my idiocy but am requesting some help with this. I KNOW it's an easy fix, it's just over my head, I'm only four days into programming, so I'm a complete newb. Your kindness is requested.

----
<?php

// connection

mysql_select_db("doofyd5_comments", $con);

$ArticleDescription=mb_convert_encoding($ArticleDescription, 'UTF-8', 'UTF-8');
$URL=htmlspecialchars($URL, ENT_QUOTES);
$ArticleDescription=str_replace('\"','&quot;',$ArticleDescription);

$sql="INSERT INTO web_articles (ArticleDescription, URL) VALUES ('$_POST[ArticleDescription]','$_POST[URL]')";

if (mysql_query($sql,$con)) {
    header ("location:desiredurl");
    require_once('desiredurl");
    exit();
    }
    else {

echo "You may have added a single quote to the article description!";
}

mysql_close($con)

?>
----

I have a paragraph in a text in my data table column with apostrophes and heights, like, "He'll likely grow beyond 6'6"."

 

I've tried addslashes($update), but it's not working.  (At another time I thought I had something like that.)

Is there something that will take care of it short of typing \ before every instance I use quotes, the using stripslash?

Hello all.

I have a textarea on a form that users are posting new's stories into. Most are just copy/pasteing from Word, and they need to be able to include single quotes.
(ie: John's favorite store is Micky's)

I can't figure out how to make the single quotes (') into double quotes ('') so MSSQL will insert them in.

Any help? Here's my process code:


<?php
$title = $_POST['title'];
$district = $_POST['district'];
$central = $_POST['central'];
$east = $_POST['east'];
$north = $_POST['north'];
$west = $_POST['west'];
$story = $_POST['story'];
$date = date("l, M j, Y");
$sqlpicturename = "$picturename.jpg";
$showpicture = $_POST['showpicture'];




//declare the SQL statement that will query the database
$query = 
"
INSERT INTO News (district, central, east, north, west, date, title, story, picture, 

showpicture, show)

Values ('$district' , '$central', '$east' , '$north', '$west' , '$date', '$title' , 

'$story', '$sqlpicturename' , '$showpicture' , 'true')

";

//execute the SQL query and return records
$result = mssql_query($query);



//display the results 

echo "Thank You For Posting Your Story:<b> $title </b><br /><br /><a 

href='addstory.php'>Click Here To Add Another Story</a><br /><br /><a href='index.php'>Click 

Here To Go Back To The WebEdit Menu</a>";
echo "<br /><br />";

mssql_close();

?>
 

how do i handle single quotes in sql query

Code: [Select]
" SELECT name from phrase WHERE name='$stitle' ";this returns an error because the name contains single quotes like this:
Johnson's.

I'm not sure if this is an HTML or browser issue...
But single quotes in strings from database don't work for me in Chrome for some reason. To mine or any other computers.
Every other browser detects these quotes.

I'm outputting an SQL result containing strings like:

Texas Hold'em
or
America's Cup

and I get

Texas Hold
America

Is there a difference between a single quote regex and and double quote regex ?   for example :

<?php
$res1 = preg_match('/shi*t/', $comment);
$res2 = preg_match("/shi*t/", $comment);
?>

Thank you
Edited by Dareros, 17 September 2014 - 07:07 PM.

 

same(this.getParams['vb'], ab.fill(), 'vb test');

    Expected: false
Result: "false"
Diff:     
false "false"   Please tell me how to fix this problem.

hello;

my webhost made a change to my php.ini file yesterday.  since then php is escaping single quotes that it receives from flash.

Code: [Select]
//-- AS3
var myVariables:URLVariables = new URLVariables();


myVariables.pvs_params = "'h'e'l'l'o" ;

var myURLRequest:URLRequest = new URLRequest("mysql_task_mgr.php");
myURLRequest.data   = myVariables ;
myURLRequest.method = "get"       ;

navigateToURL( myURLRequest, '_blank' ) ;


Code: [Select]
//-- php
print( $_GET[ "pvs_params"    ]   ) ; // --> \'h\'e\'l\'l\'o



any thoughts?

my webhost is stumped;

When I add a ' or " quotes in a textarea I get a sql error when it tries to insert the record.    I was told to use mysqli_real_escape_string but that didn't work.    Here's my code -

   $blog= mysqli_real_escape_string($con, $_POST['blog']);
   

        $blog= $_POST['message'];
            
        $sql = "SELECT * FROM table WHERE `message` = '{$message}'";
        
        $result = mysql_query($sql);
        
        if ( mysql_num_rows ( $result ) > 0 )
        {
                        
            $error = "Message Exists.";
        }
        
        else
        {
        
         $error = "This message does not exist. Insert it!!!";
        
         $sql="INSERT INTO table (message) VALUES ('$_POST[message])";
        
        
        }
        
        if (!mysqli_query($con,$sql))
         {
         die('Error: ' . mysqli_error($con));
         }
        
        mysqli_close($con)

Edited by barkly, 26 October 2014 - 09:31 PM.

I have a navigation list displaying which is a mix of html and php, everything is working fine however now I want to convert this block of code into a function but am having major problems with quotes.

The line of code I currently have is 

$data = $db->query("SELECT * FROM menu")->fetchAll(PDO::FETCH_ASSOC);

foreach ($data as $row) { ?>
     <li><a href="<?php echo $row['url']; ?>" title="<?php echo $row['title']; ?>"><?php echo $row['icon'] . ' ' . $row['header']; ?></a></li>

<?php
	}
?>

As I say everything works using the above but now I am trying to echo the full li out and am having major issues with single and double quotes.

I currently have 

echo "<li><a href='#' title='the title'><i class='fas fa-user site-nav--icon'></i> Help</a></li>";

Now I am trying to use the $row['url'], $row['title'], $row['icon'] & $row['header'] as per the top example but I cannot get the combination of quote marks correct, whether to use double, single or a combination.

I would be grateful if someone could suggest the correct syntax for the a tag then I can work through the rest.

Thanks

I'm using a PHP foreach loop to set Javascript array values from PHP array values  The problem is that some of the array values contain double quotes(") so it compromises the JS script.  Is there a PHP function that automatically escapes each double quote in a given string?

Quotation marks are confusing me.   What do you guys use when it comes to quotation marks?   In HTML attributes and throughout the bodies of my web pages, I use the HTML entity (&quot;). For example:

<a href="" title="Read &quot;Article Name&quot;">

<p>In his new book, he says: &quot;This is a quote.&quot;</p>

I thought that this is the best practice.   However, today, I read that it's perfectly safe to use straight quotes (") in the body, and that I should use the HTML entity only in HTML attributes.   Is that correct?   But what if I want to use curly quotes in the body instead of straight quotes? Should I always use the HTML entities for curly quotes (&ldquo; and &rdquo;), or can I also safely use the characters (“”)?   I heard that straight quotes are safe in all browsers, even if you don't specify the character set of your web pages, but that curly quotes are only safe if you specify the character set or if you use the HTML entities.   Is that true?   And what about the <q> tag? Apparently, it's compatible with all browsers but they treat it differently.
Edited by Fluoresce, 30 August 2014 - 07:37 AM.

The fancy-looking quotes won't insert into my DB, so I'm trying to convert them to %93 & %94 or normal quotes.    Nothing I've tried works.   Code:   $fancy=" “test” ";
$fixed=htmlentities($old, ENT_QUOTES);   echo "fancy: $fancy<br>"; echo "fixed: $fixed";

Results:

fancy: “test”
fixed:   I want $fixed to be %93test%94, or even "test" would work. 
Edited by rwmaho, 18 October 2014 - 01:28 PM.

Hi everyone, I used to know the function, but it was a very long time ago, for when you need to just extract a single value from a query... instead of having to use mysql_fetch_assoc in a while loop to build an array...

e.g.
Code: [Select]
$TheResultingFieldValue = mysql_fetch_SOMETHING(mysql_query("SELECT aField FROM aTable WHERE anotherField = 'aCondition'"));