PHP - Removing Slashes on Submitted Input Values in PHP

By default, when input values are submitted to the PHP engine, it will add slashes to protect single quotes and double quotes. You should remove those slashes to get the original values by applying the stripslashes() function. Note that PHP engine will add slashes if the magic_quotes_gpc switch is turned off. The PHP script below is an enhanced version of processing_forms.php with slashes removed when magic_quotes_gpc is turned on:

<?php
  print("<html><pre>");
  $count = count($_REQUEST);
  print("Number of values: $count\n");
  foreach ($_REQUEST as $key=>$value) {
    if (is_array($value)) {
      print("  $key is an array\n");
      for ($i = 0; $i < count($value); $i++) {
         $sub_value = $value[$i];
         if (get_magic_quotes_gpc()) {
           $sub_value = stripslashes($sub_value);
         }
         print("    ".$key."[".$i."] = ".$sub_value."\n");
      }
    } else { 
      if (get_magic_quotes_gpc()) {
        $value = stripslashes($value);
      }
      print("  $key = $value\n");
    }
  }
  print("</pre></html>\n");
?>

Now if you submit the same data again as in the previous exercise, you will get the original values as:

Number of values: 2
  name = Alan
  comment = I want to say: "It's a good site! :->"

⇒Processing Web Forms in PHP

⇒⇒PHP Tutorials

2016-11-08, 613👍, 0💬