RE: [PHP] Escaping Chars

2003-02-07 Thread John W. Holmes
> Thanks for the reply, but I still can't seem to make the connection... > If I enter the value > 123\"/' > in a web form and put the form post value directly into the db (no > stripslashes or any other function), the value as reported by the db at a > command line query is > 123\"/' That's not ri

RE: [PHP] Escaping Chars

2003-02-07 Thread Walls Rob W Contr 75 CS/SCBS
ers, REMOTE_HOST tests for dynamic links or doing form-to-email type stuff. Entering data INTO a db adds a whole new set of challenges. I'd appreciate any other advice or clarification you could offer. Thanks, -Original Message- From: John W. Holmes [mailto:[EMAIL PROTECTED]] Sen

RE: [PHP] Escaping Chars

2003-02-07 Thread John W. Holmes
> I need to get a password value from a form, store it in a database and > then > later be able to compare a login password to the one stored in the db. > This works great unless the password contains the '\' char. > magic_quotes_gpc is ON and magic_quotes_runtime is OFF. > As a klude, I tried just