PHP - Question On How Apostrophe's Are Handled Inserting Into Mysql

I am having trouble, because I am trying to enter a string, such as this into a database field:

$string = "There's trouble ahead because they're silly.";

Ofcourse, MySQL craps out because of the apostrophes.

So I did this:

$string = mysql_real_escape_string($string);

This is entered into the database, however it is entered as this:

"There\'s trouble ahead because they\'re silly."

I was wondering how I can enter apostrophes, without entering a backslash, because now when I pull the text from the DB and display it on a page, I get a backslash in front of all apostrophes.

HELP!  Please!

Is the only way around this to add slashes, then use stripslashes() when displaying text??

Let me preface this by saying that I've been using php for a while, but never got extremely advanced, so feel free to slap me about for something stupid...

I'm working through a jQuery & PHP book, and I've noticed that he's wrapping all his column and table names in the apostrophe ` when making MySQL queries .   In the past I've never done this.  What does the ` do?  I understand about single quotes and double quotes, but haven't come across the ` being used.  What's the deal?

Hi guys I am using the code found here http://www.elated.com/articles/cms-in-an-afternoon-php-mysql/ with some alterations to try and insert data in a database via a php form, i have completed the example shown on that site and it works perfect, but I am now trying to adjust the code so that i have a user and admin section, but the form will not submit to the database.

Here is the for my form, page know as editArticles:
Code: [Select]
<?php include "templates/include/header.php" ?>

      <div id="userHeader">
        <h2><spanH1>Advertise!</spanH1> Place an advert for your book</h2>
        <p>You are logged in as <b><?php echo htmlspecialchars( $_SESSION['username']) ?></b>. <a href="user.php?action=logout"?>Log out</a></p>
      </div>

      <h1><?php echo $results['pageTitle']?></h1>

      <form action="user.php?action=newArticle" method="post">
        <input type="hidden" name="articleId" value="<?php echo $results['article']->id ?>"/>

<?php 
if ( isset( $results['errorMessage'] ) ) { ?>
        <div class="errorMessage"><?php echo $results['errorMessage'] ?></div>
<?php } ?>

        <ul>

          <li>
            <label for="booktitle">Book Title</label>
            <input type="text" name="booktitle" id="booktitle" placeholder="Title of the book" required autofocus maxlength="100"
            value="<?php echo htmlspecialchars( $results['article']->booktitle )?>" />
          </li>
          <li>
            <label for="author">Book Author</label>
            <input type="text" name="author" id="author" placeholder="Author of the book" required autofocus maxlength="50" 
            value="<?php echo htmlspecialchars( $results['article']->author )?>" />
          </li>
          <li>
            <label for="edition">Edition</label>
            <input type="text" name="edition" id="edition" placeholder="Edition" required autofocus maxlength="2"
            value="<?php echo ( $results['article']->edition )?>" />
          </li>
          <li>
<label for="category">Category</label>
            <input type="text" name="category" id="category" placeholder="Book Category E.G Buisness" required autofocus maxlength="30"
            value="<?php echo htmlspecialchars( $results['article']->category )?>" />
          </li>
          <li>
<label for="module">Module</label>
            <input type="text" name="module" id="module" placeholder="Module" required autofocus maxlength="30"
            value="<?php echo ( $results['article']->module )?>" />
          </li>
  <li>
<label for="price">Price</label>
            <input type="text" name="price" id="price" placeholder="Price" required autofocus maxlength="30"
            value="<?php echo ( $results['article']->price )?>" />
          </li>
          <li>
<label for="condition">Condition</label>
            <input type="text" name="condition" id="condition" placeholder="condition" required autofocus maxlength="30"
            value="<?php echo ( $results['article']->condition )?>" />
          </li>
          <li>
<label for="description">Description</label>
            <textarea name="description" id="description" placeholder="Description of the book including condition and associated modules" required maxlength="500"
            style="height: 15em;">
            <?php echo htmlspecialchars( $results['article']->description )?></textarea>
          </li>
          <li>
          <label for="Image">Image</label>
<input type="file" name="Image" id="Image" />
  </li>
          <li>
          <label for="pdate">Sale Date</label>
            <input type="date" name="pdate" id="pdate" placeholder="YYYY-MM-DD" required maxlength="10"
            value="<?php echo $results['article']->pdate ? date( "Y-m-d", $results['article']->pdate ) : "" ?>" />
          </li>


        </ul>

        <div class="buttons">
          <input type="submit" name="saveChanges" value="Save Changes" />
          <input type="submit" formnovalidate name="cancel" value="Cancel" />
        </div>
      </form>
<?php if ( $results['article']->id ) { ?>
      <p><a href="admin.php?action=deleteArticle&amp;articleId=<?php echo $results['article']->id ?>" onclick="return confirm('Delete This Article?')">Delete This Article</a></p>
<?php } ?>
<?php include "templates/include/footer.php" ?>
This is the form for the php, as you can see the form action is "new article"
This is the code for the action new article
Code: [Select]
function newArticle() {

  $results = array();
  $results['pageTitle'] = "New Article";
  $results['formAction'] = "newArticle";

  if ( isset( $_POST['saveChanges'] ) ) {

    // User has posted the article edit form: save the new article
    $article = new Article;
    $article->storeFormValues( $_POST );
    $article->insert();
    header( "Location: admin.php?status=changesSaved" );

  } elseif ( isset( $_POST['cancel'] ) ) {

    // User has cancelled their edits: return to the article list
    header( "Location: admin.php" );
  } else {

    // User has not posted the article edit form yet: display the form
    $results['article'] = new Article;
    require( TEMPLATE_PATH . "/admin/editArticle.php" );
  }

}
As you can see the template is set to the above form page editArticle
Below is the code for the class "article" which contains the insert function and other functions such as construct, the storeFormValues which can is used in the "newArticle" function, and of course the insert function
Code: [Select]
class Article
{

  public $id = null;
  public $booktitle = null;
  public $author = null;
  public $edition = null;
  public $category = null;
  public $module = null;
  public $price = null;
  public $condition = null;
  public $description = null;
  public $image = null;
  public $pdate = null;

  public function __construct( $data=array() ) {
    if ( isset( $data['id'] ) ) $this->id = (int) $data['id'];
    if ( isset( $data['booktitle'] ) ) $this->booktitle = preg_replace ( "/[^\.\,\-\_\'\"\@\?\!\:\$ a-zA-Z0-9()]/", "", $data['booktitle'] );
    if ( isset( $data['author'] ) ) $this->author = preg_replace ( "/[^\.\,\-\_\'\"\@\?\!\:\$ a-zA-Z0-9()]/", "", $data['author'] );
    if ( isset( $data['edition'] ) ) $this->edition = $data['edition'];
if ( isset( $data['category'] ) ) $this->category = $data['category'];
if ( isset( $data['module'] ) ) $this->module = $data['module'];
if ( isset( $data['price'] ) ) $this->price =(int) $data['price'];
if ( isset( $data['condition'] ) ) $this->condition = $data['condition'];
if ( isset( $data['description'] ) ) $this->description = $data['description'];
if ( isset( $data['image'] ) ) $this->image = $data['image'];
if ( isset( $data['pdate'] ) ) $this->pdate = (int) $data['pdate'];
  }

  public function storeFormValues ( $params ) {

    // Store all the parameters
    $this->__construct( $params );

    // Parse and store the publication date
    if ( isset($params['pdate']) ) {
      $sdate = explode ( '-', $params['pdate'] );

      if ( count($pdate) == 3 ) {
        list ( $y, $m, $d ) = $pdate;
        $this->pdate = mktime ( 0, 0, 0, $m, $d, $y );
      }
    }
  }

  public function insert() {

    // Does the Article object already have an ID?
    if ( !is_null( $this->id ) ) trigger_error ( "Article::insert(): Attempt to insert an Article object that already has its ID property set (to $this->id).", E_USER_ERROR );

    // Insert the Article
    $conn = new PDO( DB_DSN, DB_USERNAME, DB_PASSWORD );
    $sql = "INSERT INTO books ( booktitle, author, edition, category, module, price, condition, description, image, pdate )
VALUES ( :booktitle, :author, :edition, :category, :module, :price, :condition, :description, :image, FROM_UNIXTIME(:pdate) )";
    $st = $conn->prepare ( $sql );
    $st->bindValue( ":booktitle", $this->booktitle, PDO::PARAM_STR );
    $st->bindValue( ":author", $this->author, PDO::PARAM_STR );
    $st->bindValue( ":edition", $this->edition, PDO::PARAM_STR );
$st->bindValue( ":category", $this->category, PDO::PARAM_STR );
$st->bindValue( ":module", $this->module, PDO::PARAM_STR );
$st->bindValue( ":price", $this->price, PDO::PARAM_INT );
$st->bindValue( ":condition", $this->condition, PDO::PARAM_STR );
$st->bindValue( ":description", $this->description, PDO::PARAM_STR );
$st->bindValue( ":image", $this->image, PDO::PARAM_STR );
$st->bindValue( ":pdate", $this->pdate, PDO::PARAM_INT );
    $st->execute();
    $this->id = $conn->lastInsertId();
    $conn = null;
  }

I would truly appreciate if someone is able to figure out what is going wrong, btw i dont get any errors when i click the save it takes mw to the next page and show a message i have set saying the changes have been saved but it doesnt actually save to me database.

If you have any questions or i need to explain more please let me know

Thanks in advance

Hi,

Does anyone have any idea how to insert an entire php or html pages into mysql once the page has being created with php?

E.g.

np1.php

<form action="np2.php" method="post">
Name of New Page: <input type="text" name="newpage_name" />
<input type="submit" />
</form>


np2.php

<?php
$newpage_name = $_POST[ 'newpage_name' ];
$newpage_initial = "Input Contents Here.";
//echo $editor_data;   

$newpage_file = "test/" . $newpage_name . ".php";
$newpage_save = fopen($newpage_file, 'w');
fwrite($newpage_save, $newpage_initial);
fclose($newpage_save);
?>


I have managed to create a new file with php but I also want it when I click on the submit button, it will also auto save that new php file or html file into mysql.

Regards
Jas

Thanks for reading my post,

Can someone point me to the right direction here; Am trying to insert a record in a text area field into PHP/MYSQl. This time around, I am reading what the user entered into the textarea before inserting.

Take a look at this:

TEXTAREA ->
row 1: BOY
row 2: GIRL

Can I make it two rows in my database as opposed to one? I don't have a problem inserting,  just how to insert as multiple if there are two rows.

Thanks in advance