I have noticed a strange thing in PHP hosted under windows 2003.

I use addslashes function to remove any single quotes before inserting input data to db. Then I need to use stripslashes function while displaying it.

If I use

str_replace("'", "\'", $str_input)

instead of addslashes, I don't have to use stripslashes function. A single quote is getting inserted as a single quote itself in this case. Where as when I use addslashes, it is getting added as \' into the database.

I thought the above statement and addslashes are doing the same thing.

May I know why this is happening ? Is there any automatic replacement of single quotes ?

Thanks

Madhu

if u want to remove single quotes, then just do

str_replace("'","",$str_input);

Many shoes,

Jamez/SiliconFuRy

Sorry for not presenting the problem correctly. My aim is not to remove single quotes from inputs. But retain them as single quote itself in database. If I am using addslashes function, the single quotes in inputs are getting stored as \' in database. I just want to store only ' in database.

Look up the PHP manual for magic quotes.

Many shoes,

Jamez/SiliconFuRy

use addslashes($html_content) before dumping into db.
use stripslashes($html_content) before html displaying.
this should work well in win2003/iis

I thought we should follow standard: addslahes() when iserting into db -n- stripslashes() when outputting into files. But some serves have 'magic_quotes_gpc On' I used ini_set(magic_quotes_gpc, 'Off'); but its not working. Else I've to modify PHP source code.

Yes, that magic_quotes_gpc and magic_quotes_runtime are playing something here. I am currently doing a thorough research. I hope to publish a function soon.