PHP - Escaping Array

Hi guys I am encoding JSON in PHP but want to know how to escape ' and " thats in the content?

Thanks

Hi, newbie here.
Could someone show me how to properly escape the quotes in this code so it works properly? I'm having major problems with it, thanks.

echo "<td style="background-color:#fff"
 onMouseover="this.style.backgroundColor='#ff9900';"
 onMouseout="this.style.backgroundColor='#fff';">"

Hi,

I have set up a simple function so that when a user enters a title in a php form, php gives the first letter of each word a capital letter. As follows:

function caps($text){
$search_text=$text;
$search_text=ucwords(strtolower($search_text));
$look_for = "(a";
$change_to = "(A";
$changed_text = str_replace($look_for, $change_to, $search_text);
$search_text=$changed_text;
$look_for = "(b";
$change_to = "(B";
$changed_text = str_replace($look_for, $change_to, $search_text);
$search_text=$changed_text;
$look_for = "(c";
$change_to = "(C";

//...etc...etc.. up to

$look_for = "(z";
$change_to = "(Z";
$changed_text = str_replace($look_for, $change_to, $search_text);
$search_text=$changed_text;
return $search_text;

}

The trouble is, if I were to enter the following "The secret of DNA", my function would return "The Secret Of Dna" (removes the caps). Any ideas how to get around this would be most useful. Thanks in advance.

Russ

Hello!

I'm very new to PHP, and I'm sure this is a noob question - still, its got me stuck!

How would I best escape this properly?

$resizeObj = new resize('C:\xampp\htdocs\images_test\$file');

so that $file is parsed?

the whole script is as follows:

Code: [Select]
<?php
// *** Include Nathan's class
include("resize-class.php");

// Define the full path to your folder from root 
$path = 'C:\xampp\htdocs\images_test'; 

// Open the folder 
$dir_handle = @opendir($path) or die("Unable to open $path"); 

    // Loop through the files 
    while ($file = readdir($dir_handle)) { 

    if($file == "." || $file == ".." || $file == "index.php" ) 

        continue; 

// *** 1) Initialise / load image
$resizeObj = new resize('C:\xampp\htdocs\images_test\$file');
// *** 2) Resize image 
$resizeObj -> resizeImage(100, 100, 'auto');
// *** 3) Save image
$resizeObj -> saveImage('C:\xampp\htdocs\images_test\$file', 90);

        echo "<a href=\"$file\">$file</a><br />"; 
echo $path;

    } 
    // Close 
    closedir($dir_handle); 



?>

I am passing this value:

Quote

\\"''"""\""\\\\""""''''\"""\\\""''""""'/'/'/\"'\'\\'\\''\\'''''


the the following code is not handling it correctly:


$data = mysql_real_escape_string(strip_tags(htmlspecialchars($data)));


here is what it looks like when the server gets it:

Quote

\\"''"""\""\\\\""""''''\"""\\\""''""""'/'/'/\"'\'\\'\\''\\'''''



and here is after the code executes:

Quote

\\\\&quot;\'\'&quot;&quot;&quot;\\&quot;&quot;\\\\\\\\&quot;&quot;&quot;&quot;\'\'\'\'\\&quot;&quot;&quot;\\\\\\&quot;&quot;\'\'&quot;&quot;&quot;&quot;\'/\'/\'/\\&quot;\'\\\'\\\\\'\\\\\'\'\\\\\'\'\'\'\


Notice if I have

Quote

\'


it bugs out.

I've got a file with some strings that have both types of quotes in them.  And I seem to have managed to get the data, display it in my html, store it in a js array (using a json_encode in php and then simply inserting it into my js) but I cannot seem to pass the string as a parameter form an onclick function call to js.    For most strings the addslashes makes it work in the function call.  But for those with both sets of quotes it won't work.  My console tells me there are "unterminated string constants..".  I've experimented with many silly changes but none make it work.   Ex. of the strings:   What do you mean "It's crooked"?   Of course I could remove the contraction and that would probably work, but that would be a hack, would not it?

I have a html form with a wusiwug editor when i selete an image it generates the code for that img like

<img src="http://www.abc4blinds.co.uk/editor/elfinder/files/icons%20social.png" width="33" height="35"> 

but when i submint it

it gives me <img src="%5C" http:="" www.abc4blinds.co.uk="" editor="" elfinder="" files="" icons%20social.png\="" 33\="" 35\="" width="\" height="\"> 

why i am not running any vailidation all i am doing is accessing it in $_POST['article']

<td><textarea name="article" cols="85" rows="5" id="article"><?php echo $_POST['article']; ?></textarea></td>

This should be really simple but I can't get my head round it.

Please see the PHP/HTML below.


<?php
$a = array(

'test' =>

"'data'"
);
$json = json_encode($a);
?>

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Unknown Page</title>
<script type="text/javascript" src="http://ajax.microsoft.com/ajax/jquery/jquery-1.5.min.js"></script>
<script type="text/javascript">
var j = jQuery.parseJSON('<?php echo $json; ?>');
</script>
</head>
<body>
</body>
</html>


You will notice that data is stored by " then '
I have tried how it is and also with add slashes


$a = array(

'test' =>

addslashes("'data'")
);

It either outputs without slashes (which is clearly wrong)
Code: [Select]
var j = jQuery.parseJSON('{"test":"'data'"}');Or which I cant work out why dosent work
Code: [Select]
var j = jQuery.parseJSON('{"test":"\\'data\\'"}');
Now firebog throws the following error
Code: [Select]
missing ) after argument list
How should I be escaping this variable?

I have a paragraph in a text in my data table column with apostrophes and heights, like, "He'll likely grow beyond 6'6"."

 

I've tried addslashes($update), but it's not working.  (At another time I thought I had something like that.)

Is there something that will take care of it short of typing \ before every instance I use quotes, the using stripslash?

I am using PHP with ODBC to connect to an existing MSSQL database to query for some names.  When I query a name that has an apostrophe in it, I get an error.

Example typing O'Malley as the name:

Quote

Warning: odbc_exec() [function.odbc-exec]: SQL error: [Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near 'malley'., SQL state 37000 in SQLExecDirect



I have used addslashes to the string but get the same result:

Code: [Select]
$string = addslashes($_POST['string']);

$connect = odbc_connect("$mssql_name", "$mssql_user", "$mssql_pass");

$query_mssql = "SELECT pr.NameFirst, pr.NameLast, pr.NameMiddle, pr.Birthdate, p.Barcode, p.OrganizationID
FROM PatronRegistration pr
JOIN Patrons p ON (pr.PatronID = p.PatronID)
WHERE pr.NameLast = '$string'";

$result = odbc_exec($connect, $query_mssql);

Any ideas?

This topic has been moved to PHP Regex.

http://www.phpfreaks.com/forums/index.php?topic=353729.0

What is the correct way to echo this line???
Quote

<php?
echo "proceed to <a href= <?php echo urldecode($_GET['url']); ?>> <?php echo urldecode($_GET['title']); ?>   </a>";
?>


My Parse error says:
Quote

Parse error: parse error, expecting `T_STRING' or `T_VARIABLE' or `T_NUM_STRING' in C:\Program Files\EasyPHP5.3.0\www\URL_tester\page2.php on line 16

Hi. I am brand new here...

I have a script where I'm trying to parse an email and everything is working fine but it looks like the percent sign (%) is getting stripped out of my message.

The percent sign is in the subject message and it gets removed and I also can't use it in any other strings in the script.

I've tried just adding a slash in front like \% but that didn't fix it.

Is there another way to escape a percent sign when using it in a script?

Any help is appreciated.
Thanks.
-Jeff

hello;

my webhost made a change to my php.ini file yesterday.  since then php is escaping single quotes that it receives from flash.

Code: [Select]
//-- AS3
var myVariables:URLVariables = new URLVariables();


myVariables.pvs_params = "'h'e'l'l'o" ;

var myURLRequest:URLRequest = new URLRequest("mysql_task_mgr.php");
myURLRequest.data   = myVariables ;
myURLRequest.method = "get"       ;

navigateToURL( myURLRequest, '_blank' ) ;


Code: [Select]
//-- php
print( $_GET[ "pvs_params"    ]   ) ; // --> \'h\'e\'l\'l\'o



any thoughts?

my webhost is stumped;

Aloha,

I am using a simple html form and php script to send data to a SMS gateway that I have setup already. Everything works great. I fill out the form, the data is sent and instantly I get a text message on my iphone. Here's the problem. If I use an apostrophe in the message text field I get an error code. I am assuming the html text field needed to be escaped but I tried everything and I still get the error. Any ideas on what to check or do?

Here's the php send code (variables coming in from html form fields):


Code: [Select]
<?php



if (!empty($_POST)) {
   
    $name = trim($_POST["name"]);
   
 $contactnumber = trim($_POST["contactnumber"]);

    $message = trim($_message);


    if (empty($name)) {

        exit("Name cannot be blank.");

    }
   
   if (empty($contactnumber)) {

        exit("Please provide a contact number.");

    }
       
      
   if (empty($message)) {

        exit("Message cannot be blank.");

    }

   $subject = "$name . $contactnumber";


    $strlen_subject = ($subject != "") ? strlen($subject) + 3 : 0;

    $strlen_message = strlen($message);


    $express = $_POST["express"];

    if ($express && ($strlen_subject + $strlen_message > 160)) {

        exit("In case of express delivery, message length should not exceed 160 characters.");

    }

    elseif ($strlen_subject + $strlen_message > 130) {

        exit("In case of standard delivery, message length should not exceed 130 characters.");

    }
      

    $subject = urlencode($subject);
   
   $contactnumber = urlencode($contactnumber);

   $message = urlencode($message);
   

$ch=curl_init('https://app.eztexting.com/api/sending');

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

curl_setopt($ch,CURLOPT_POST,1);
   

curl_setopt($ch,CURLOPT_POSTFIELDS,"user=PuaDog&pass=808cougar&phonenumber=18087211458&subject=$subject&message=$message&express=1");

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

$data = curl_exec($ch);


    switch($data) {

        case 1:

         header('location:message_sent.php?message1=1');

            break;

        case -1:

            print("Invalid user or password");

            break;

        case -2:

            print("Credit Limit Reached");

            break;

        case -5:

            print("Local Opt Out");

            break;

        case -7:

            print("Invalid Message");

            break;

        case -104:

            print("Globally Opted Out Phone Number");

            break;

        case -106:

            print("Incorrectly Formatted Phone Number");

            break;

        case -10:

            print("Unknown Error");

            break;

    }

}




?>

Mahalo!
Tom

MOD Edit: [code] . . . [/code] tags added . . .