Automatic masking in PHP when using FORMS/POST



Hi,

I have the following problem. I am transferring SQL code using a form:

echo "<form action=\"myfile.php\" method=\"POST\">";
(...)
echo "<input type=\"submit\" name=\"SubmitSelectedView\" value=\"...\" title=\"...\">\n";

Everything works fine, I am using the following code in myfile.php:

$filter=$_POST['SubmitSelectedView'];

Problem is that PHP is automatic masking the content. When sending

ProjectName like 'Test%'

I am receiving

ProjectName like \'Test%\'

What goes wrong? Do I have to change the transfer mode? I tried to work with htmlspecialchars_decode() or entity_decode(), but this does not help.

Thanks,

Matthias

.