PHP中的字符串操作以直接处理或存储在表中

Question

I frequently need to access the user text like post, tweet, articles etc.

These contains ' or \\ and I get trouble.

Even using the

mysqli_real_escape_String also does not help stripslashes($str) also does not help

which are the function most suitable for this?

This is one of the case:

$tweet = 'Best way to en'd a nights of debauchery around here. The hot dogs here are beyond great the TOKYO DOG is probably my favorite one...that taste of teriya\ki...';

If I use this using above both methods , it even get stuck without any error.

Answer 1

I would try using the htmlspecialchars function around the tweet. It will convert the symbols and special characters into their HTML entities.

$tweet = htmlspecialchars($tweet);

Answer 2

<?php
  $tweet = "Best way to en'd a nights of debauchery around here. The hot dogs here are beyond great the TOKYO DOG is probably my favorite one...that taste of teriya\ki...";
  echo $tweet;
?>

output is:

Best way to en'd a nights of debauchery around here. The hot dogs here are beyond great the TOKYO DOG is probably my favorite one...that taste of teriya\\ki...

Answer 3

A function to make strings in general safe doesn't exist. Strings containing special characters aren't inherently unsafe or tricky. The unsafe and tricky comes from giving them to another interpreter (eg MYSQL or a Browser) in their raw form. Now, how to escape the strings depends entirely on your interpreter. In case of MYSQL you can use PDO, but it your interpreter is different you have to use a different escaping construct.

You should also not think about it as changing the string, you should think about it as formatting the string in a way so that it will have the same meaning in the new context you are using it.

As an example, if something needs to be first put in a database and then displayed in the browser you should escape it once just before you put it in the database according to the database rules. Then when you fetch it from the db to display in a browser you should escape it again according to the rules for how html is interpreted.

To give specific advice regarding your situation we need a bit more info about where your data corruption or errors occur.

Answer 4

Edit: never mind, the htmlspecialcharacters answer is correct for escaping. My assumption below was wrong.

---

I'm assuming you need to get rid of those from the string.

preg_replace is your best bet, if you know you'll only get ' or \\ in the string.

$tweet = preg_replace("/\'\\\\/","",$string);

Try this question if you have trouble.