Some characters of $_POST string variable are wrongly displayed

Question

I have 2 php pages. After submitting the form on page1 it's posted data is being displayed on page2. This works fine but some of characters like ' and " automatically get a \ just before themselves and the spaces are also gone.

For example I give ' " on page1. This is displayed as \' \" on page2. As you see the characters got \ attached and the spaces are also gone.

My code:

Page1.php

<html>
<head>
<title>PAGE 1</title>
</head>
<body>

    <form enctype="multipart/form-data" action="page2.php" method="post">
       <input type="text" name="txtNaam" id="txtNaam" />
       <input type="submit" value="Submit">
    </form>

</body>
</html>

Page2.php

<?php
// TEST 1
echo $_POST['txtNaam'];               // <== \' \"

echo "<br/>";   

// TEST 2
echo rawurlencode($_POST['txtNaam']); // <== %5C%27%20%20%20%20%5C%22

echo "<br/>";   

// TEST 3
echo urlencode($_POST['txtNaam']);    // <== %5C%27++++%5C%22
?>

How can I get these special characters correctly displayed when they are posted?

Try this first.. http://www.php.net/manual/en/security.magicquotes.disabling.php then look at this http://kunststube.net/frontback/ — user20232359723568423357842364, Aug 13 '13 at 13:55
You can also use 'stripslashes' function. http://php.net/manual/en/function.stripslashes.php — Jahanzeb, Aug 13 '13 at 14:00
Check out http://stackoverflow.com/questions/3006407/slash-before-every-quote-problem — Rohit Chemburkar, Aug 13 '13 at 14:03

score 1 · Answer 1 · answered Aug 13 '13 at 14:11

1

Try this:

echo stripslashes($_POST['txtNaam']);

answered Aug 13 '13 at 14:11

bayuah

251
1
5
10

score 0 · Answer 2 · answered Aug 13 '13 at 13:56

0

If magic_quotes_gpc is turned on, all $_GET, $_POST and $_COOKIE variables (GPC) in PHP will already have special characters like ", ' and \ escaped.

To prevent this from happening, you can disable it.

Edit your php.ini like so:

magic_quotes_gpc = Off

answered Aug 13 '13 at 13:56

I've tried this with `ini_set` but didn't work. It is also deprecated since 5.3 and maybe this was the reason of fail. thanks for the info! – Korki Korkig Aug 13 '13 at 14:46

score 0 · Accepted Answer · answered Aug 13 '13 at 13:59

0

Have you tried

echo htmlspecialchars($_POST['txtNaam'], ENT_QUOTES);

or

echo htmlentities(stripslashes($_POST['txtNaam']), ENT_QUOTES)

answered Aug 13 '13 at 13:59

the second approach helped. Thanks! – Korki Korkig Aug 13 '13 at 14:47

score 0 · Answer 4 · answered Aug 13 '13 at 14:06

0

You can also use base64_encode() & base64_decode()

answered Aug 13 '13 at 14:06

Jigar

3,256
1
30
51

Some characters of $_POST string variable are wrongly displayed

4 Answers4