如何在php表单文件上传中从文件名中删除特殊字符，如撇号/引号

Question

i have problem in file upload with filename vikas's photo.jpg.i have to upload and insert filename (viaks's photo.jpg)into mysql database table using php script. filename can be handled at client side if possible using jquery.

Answer 1

You have two choices for this situation. Either escape the quote or remove the quote. If you escape the single quote then your file name will look like vikas\\'s photo.jpg So it can be inserted to database without any problem. If you remove single quote then your file name will become vikass photo.jpg

If you want to escape the quote then you can use mysql_real_escape_string($string) since mysql_* functions are depreciated you can also use

mysqli_real_escape_string ( mysqli $link , string $escapestr )

in your case

$oldFileName = $_FILES['file']['name'];
$fileName = mysql_real_escape_string($oldFileName);

If you want to replace quotes then you can use $fileName = str_replace("'","", $oldFileName);