Question

I use mysql_real_escape_string() before interting information in the database, but when I want to show the data from the database, ‘ is replaced with \’.
So how can I get rid of that backslash? Is there a function that reverses mysql_real_escape_string()?

Answer 1

1. There is NO [built-in] function to reverse mysql_real_escape_string.
2. If you have only quotes but not linebreaks escaped – it is not mysql_real_escape_string to blame.
3. Instead of stripping, you apparently have to make your code not to add them.
4. There are 2 possible reasons for the slashes to appear:
   • magic_quotes_gpc is turned on. Just turn it off.
   • some extra-wise-data-sanitize function in charge. Get rid of it.
5. Just to make sure: not whatever “information” but only strings (query parts enclosed in quotes) have to be escaped. For the any other query part escaping is useless and you have to find another way to protect them from SQL injection