3 replies to this topic

[thatsme]

Hi. Let's say i have a form with textarea. Then I type 6 in the textarea and press Enter two times. After that i press submit and php code starts to run. It uses function trim() to remove the effect of those two pushes of Enter from textarea's value. Then php print the value of textarea and the result is: 6\r\n\r\n. WHY? I used trim(). Here's the code:

$commentText = mysql_real_escape_string($_POST['commentArea']);
$commentText = trim($commentText);

[Vaielab]

I'm not 100% sure, but try to trim before mysql_real_escape_string
Since mysql_real_escape_string will escape the \r\n chars, and trim are looking for thoses char unscaped, this might be the problem

[Alexander]

php.net/mysql_real_escape_string said:

mysql_real_escape_string() calls MySQL's library function mysql_real_escape_string, which prepends backslashes to the following characters: \x00, \n, \r, \, ', " and \x1a.

This is to prevent expansion of the string, and thus render either malformed encoding during transportation, or malicious use less likely. You will need to follow Vaielab's advice.

[thatsme]

thank's. that helped