Question

I have an input form which I use in order to post some data in the database, the issue is it won’t allow me to post characters like “+”, “&” etc..

Now I’ve used this format:

$postPagesashtepi = $_POST["postPagesashtepi"];

The form looks like this:

<input id="pagesashtepi" name="pagesashtepi" type="text" size="40" value="<?php echo $row['pagesashtepi'];?>

I’ve also used filter sanitized too but no success again..
Can someone help me with this?

Answer 1

You Can Use

 $string=stripslashes($string);

This make your input Un-quotes for DB

use This Function For Safe input

function dbcodec($string){
    $string=stripslashes($string);
    $string=str_replace("\\",'\\',$string);
    $string=str_replace("'","\'",$string);
    $string=str_replace("`","\`",$string);
    $string=str_replace('"','\"',$string);
    $string=str_replace('*','\*',$string);
    return $string;
}

and You Can Use mysql_real_escape_string for escape input