Automatic masking in PHP when using FORMS/POST
- From: Matthias Braun <mat_braun@xxxxxx>
- Date: Thu, 27 Nov 2008 09:08:16 +0100
Hi,
I have the following problem. I am transferring SQL code using a form:
echo "<form action=\"myfile.php\" method=\"POST\">";
(...)
echo "<input type=\"submit\" name=\"SubmitSelectedView\" value=\"...\" title=\"...\">\n";
Everything works fine, I am using the following code in myfile.php:
$filter=$_POST['SubmitSelectedView'];
Problem is that PHP is automatic masking the content. When sending
ProjectName like 'Test%'
I am receiving
ProjectName like \'Test%\'
What goes wrong? Do I have to change the transfer mode? I tried to work with htmlspecialchars_decode() or entity_decode(), but this does not help.
Thanks,
Matthias
.
- Follow-Ups:
- Re: Automatic masking in PHP when using FORMS/POST
- From: "Álvaro G. Vicario"
- Re: Automatic masking in PHP when using FORMS/POST
- Prev by Date: Re: MySQL -> PHP -> MS Excel?
- Next by Date: Re: Get result from Google search
- Previous by thread: Click fraud
- Next by thread: Re: Automatic masking in PHP when using FORMS/POST
- Index(es):