Sending special characters to MSSQL

Written by: sliptop Published by: SAJChurchey Published on: 2005-10-05 19:26:49 Topic: PHP

Search OSI about PHP. More articles by sliptop.  viewed 14217 times  send this article  printer friendly

Rate this article : -012345

Are you getting tired with struggling to send a single quote to the database from a large amount of posted variables? This small code snippet loops through all _POST vars and then strips the php added slashes, and adds an escape char to the _POST var.

You can also substitute _POST for _GET or _REQUEST if you want to change the type of input check. foreach($_POST as $key => $value) { $value = str_replace("'","''",$value); $value = stripslashes($value); $_POST[$key] = $value; } This is different from what you see on the php doc help. Because you are changing the key value, not just the value (a ref type) you are actually changing the value of the array var. This code can be easily modified to loop through just about any array you like, but this is a nice snippet to add into a more complex input filter for forms etc, anything that interacts with a MSSQL db (Can be used with other SQL db's too). Of course different versions of PHP will vary slightly, so just check the slashes policy stuff with php.net. Enjoy.

Did you like this article? There are hundreds more. Join OSIX Get Involved Challenge or Test your skills

Comments: bb 2005-10-06 12:54:40 ive never had to do this in any php code. sure your not mental? Domuk 2005-10-06 18:17:00 It depends on the options. However, I believe there's a specific option to set that will parse everything as if it was being passed into an MSSQL db, which should sort all this out. Never used it, though, so if there's an actual set of functions for MSSQL dbs, I guess it would do that anyway. MikeSherman 2009-07-29 11:34:11 Possibly you are referring to Magic Quotes, a now deprecated setting which if set to on ran addslashes() on all POST, GET, COOKIE data automatically: http://uk.php.net/manual/en/security.magicquotes.php Anonymously add a comment: (or register here) (registration is really fast and we send you no spam) BB Code is enabled. Captcha Number: