stripslashes

(PHP 4, PHP 5)

stripslashes — Zrušit escapování provedené funkcí addslashes()

Popis

string stripslashes ( string $str )

Vrací řetězec s odstraněnými zpětnými lomítky. (\' se stává ' a pod.) Zdvojená zpětná lomítka (\\) se spojují do jednoduchých (\).

Funkce stripslashes() může být použita například tehdy, když je PHP direktiva magic_quotes_gpc nastavena na on (což je výchozí nastavení) a vy tato data nevkládáte na místa (jako je databáze), která toto escapování potřebují. To je například tehdy, když data zadaná do HTML formuláře pouze vypisujete.

Příklad 2118. Příklad funkce stripslashes()


<?php

$str = "Jmenuješ se O\'reilly?";



// Outputs: Jmenuješ se O'reilly?

echo stripslashes($str);

?>

Viz také addslashes() a get_magic_quotes_gpc().

stristr

stripos

Last updated: Sat, 24 Mar 2007

add a note User Contributed Notes
stripslashes

lukas.skowronski at gmail dot com
20-Jun-2007 04:15


If You want to delete all slashes from any table try to use my function:



function no_slashes($array)

    {

        foreach($array as $key=>$value)

            {

                if(is_array($value))

                    {

                        $value=no_slashes($value);

                        $array_temp[$key]=$value;                        

                    }

                else

                    {

                        $array_temp[$key]=stripslashes($value);

                    }

            }        

        return $array_temp;    

    }

dragonfly at networkinsight dot net
11-Mar-2007 04:22


If you are having trouble with stripslashes() corrupting binary data, try using urlencode() and urldecode() instead.

JAB Creations
05-Mar-2007 08:49


When writing to a flatfile such as an HTML page you'll notice slashes being inserted. When you write to that page it's interesting how to apply stripslashes...



I replaced this line...

<?php fwrite($file, $_POST['textarea']); ?>



With...

<?php if (get_magic_quotes_gpc()) {fwrite ($file, stripslashes($_POST['textarea']));}?>



You have to directly apply stripslashes to $_POST, $_GET, $_REQUEST, and $_COOKIE.

gregory at nutt dot ca
22-Feb-2007 06:48


Here is code I use to clean the results from a MySQL query using the stripslashes function.



I do it by passing the sql result and the sql columns to the function strip_slashes_mysql_results.  This way, my data is already clean by the time I want to use it.



    function db_query($querystring, $array, $columns)

    {

      if (!$this->connect_to_mysql())

       return 0;



     $queryresult = mysql_query($querystring, $this->link)

        or die("Invalid query: " . mysql_error());

    

      if(mysql_num_rows($queryresult))

      {

          $columns = mysql_field_names ($queryresult);

    

          if($array)

          {

              while($row = mysql_fetch_row($queryresult))

                $row_meta[] = $this->strip_slashes_mysql_results($row, $columns);

              return $row_meta;

          }

          else

          {

              while($row = mysql_fetch_object($queryresult))

                $row_meta[] = $this->strip_slashes_mysql_results($row, $columns);

              return $row_meta;

          }

      }

      else

        return 0;

    }

    

    function strip_slashes_mysql_results($result, $columns)

    {

        foreach($columns as $column)

        {

              if($this->debug)

                  printp(sprintf("strip_slashes_mysql_results: %s",strip_slashes_mysql_results));

              $result->$column = stripslashes($result->$column);

        }

        return $result;

    }

Allen
06-Feb-2007 11:41


In response to Tim's solution, it is only good for one-dimensional array.  If the variables happened to be multi-dimensional arrays, we still have to use function like 'stripslashes_deep'.

stoic
02-Jan-2007 08:31


in response to crab dot crab at gmail dot com:



$value need not be passed by reference. The 'stripped' value is returned. The passed value is not altered.

Kibby
14-May-2006 01:41


Okay, if using stripslashes_deep, it will definitely replace any NULL to "".  This will affect to coding that depends isset().  Please provide a workaround based on recent note.

hauser dot j at gmail dot com
21-Feb-2006 02:13


Don't use stripslashes if you depend on the values NULL.



Apparently stripslashes converts NULL to string(0) "" 



<?php

$a = null;

var_dump($a);



$b = stripslashes($a);

var_dump($b);

?>

Will output



NULL

string(0) ""

alf at mitose dot net
25-Oct-2005 05:09


Take care using stripslashes() if the text you want to insert in the database contain \n characters ! You'll see "n" instead of (not seeing) "\n".



It should be no problem for XML, but is still boring ...

r_loebs at hotmail dot com
24-Jun-2005 07:03


Of course why not just do an



if($r){ stuff; } <-- this will check it all, NULL, 0, ""

10-Feb-2005 07:45


If you want to deal with slashes in double-byte encodings, such as shift_jis or big5, you may use this:



<?

function stripslashes2($string) {

    $string = str_replace("\\\"", "\"", $string);

    $string = str_replace("\\'", "'", $string);

    $string = str_replace("\\\\", "\\", $string);

    return $string;

}

?>

mattyblah at gmail dot com
10-Sep-2004 08:51


It should be of note that if you are stripping slashes to get rid of the slashes added by magic_quotes_gpc then it will also remove slashes from \. This may not seem that bad but if you have someone enter text such as 'testing\' with a slash at the end, this will cause an error if not corrected. It's best to strip the slashes, then add a slash to every single slash using $text = str_replace('\\', '\\\\', $text);

hash at samurai dot fm
30-Nov-2003 09:34


Might I warn readers that they should be vary careful with the use of stripslashes on Japanese text. The shift_jis character set includes a number of two-byte code charcters that contain the hex-value 0x5c (backslash) which will get stripped by this function thus garbling those characters.



What a nightmare!

add a note

stristr

stripos

Last updated: Sat, 24 Mar 2007