Question

I am learning PDO after the many people telling me to do so. However in updating one of my scripts, PDO is causing me a problem that I’m not sure how to fix.

My problem is a user will input the title to the website. Say its “Smith’s Inventory”.

Since the whole PDO switch, it is saved in the db as “Smith\’s Inventory”. Which is output in various places on my website. Such as the header, the html title, and the settings text box. If you click save again with \’, then you get \\’, and so on.

I realize why this is done, but how can it be fixed?

Here is the instert code:

foreach ($_POST as $key => $value)
{
    $sql = $dbh->prepare("UPDATE settings set value=? where variable=?");
    $sql->bindParam(1, $value);
    $sql->bindParam(2, $key);
    $sql->execute();
}
echo '<h2><font  color=green>Saved</font></h2>';

Answer 1

You can use stripslashes on the PHP side.

<?php
$str = "Is your name O\'reilly?";

// Outputs: Is your name O'reilly?
echo stripslashes($str);
?>