php String from user input and from database

Question

I have a problem about this strings

currently i save some strings into the database with simple insert query and cleaning the data by this code

mysql_real_escape_string($data)

i get the data from the database using a simple query

sample input

$saveString = "You're great";

saving...

Insert into . . . values (mysql_real_escape_string($saveString))

now when i get the string i get the You're great string

When i use this code

$str = str_word_count(strtolower($fromDbString), 1);

print_r($str);

It outputs:

Array
(
    [0] => You're
    [1] => great 
)

But if the string came from the users input in textbox and i use this code.

   $str = str_word_count(strtolower($fromUserInput), 1);

    print_r($str);

I get something like this:

   Array
    (
        [0] => You
        [1] => re
        [2] => great 
    )

How do i fix the string from the database to be process like the one from the users input?

I tried htmlentities() to check the values and the output was

from db You're great from input You're great

i tried to html decode the string from db but it still outputs You're great

Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial. — h2ooooooo
– h2ooooooo, Commented Sep 25, 2013 at 11:43

JackPoint · Accepted Answer · 2013-09-25 11:42:52Z

2

You could try to add addslashes():

$str = str_word_count(addslashes(strtolower($fromUserInput)), 1);

print_r($str);

answered Sep 25, 2013 at 11:42

JackPoint

4,1031 gold badge33 silver badges42 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

JackPoint Over a year ago

To the user input. I think the database input is already escaped.

Snippet Over a year ago

yes it was escaped but i need an output from db to look like in user input

JackPoint Over a year ago

You can use stripslashes() to remove the slashes from the database data.

Sbml · Accepted Answer · 2013-09-25 11:46:18Z

0

If you want to return an array that contains all the string words you could try this instead str_word_count

$str = preg_split("/[' ]/", strtolower($fromUserInput));
//$str = preg_split("/[' ]/", strtolower($fromDbString));
print_r($str);

answered Sep 25, 2013 at 11:46

Sbml

1,9172 gold badges17 silver badges27 bronze badges

1 Comment

Sbml Over a year ago

Yes, in this part [' ] you add the delimiters for the words found in the String. And this returns an array with every word like your code str_word_count(strtolower($fromUserInput), 1);

Collectives™ on Stack Overflow

php String from user input and from database

2 Answers 2

3 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related