Re: [PHP-DB] Removing slashes from the database

[Ron Piggott]

On 03/06/15 09:37, Aziz Saleh wrote:
On Wed, Jun 3, 2015 at 12:25 AM, Ron Piggott 
> wrote:


On 02/06/15 23:20, Aziz Saleh wrote:

On Tue, Jun 2, 2015 at 11:08 PM, Ron Piggott
mailto:ron.pigg...@actsministries.org>> wrote:


On 02/06/15 22:58, Aziz Saleh wrote:



On Tue, Jun 2, 2015 at 10:50 PM, Ron Piggott
mailto:ron.pigg...@actsministries.org>> wrote:


I am working through the process of removing \'s from
the database. I am trying to get this query using a
variable starting with "<<<"

$query1  =<<
I want \" to become just "
I want \' to become just '
I also want however \ was escaped to become just \

(I am trying to revert the text back to what it was
originally before mysql_escape_string was applied)

I hope this helps elaborate.

Ron


For simplicity sake, do each one in its own query and see which
one breaks if any:


$query1  =<<
A friend pointed out to me today: In the earlier versions of PHP
there was a setting called 'magic_quotes_gpc'.  When enabled
slashes were added  by default. This setting has since been
depreciated as of PHP 5.3 and was removed completely in PHP 5.4. 
I am using PHP 5.6.


Thank you for the suggestion of running 3 separate commands. 
Individually these execute successfully.  Is it even possible to

do a "REPLACE" in the fashion I have noted?

Ron


It is possible, but sometimes with the clutter you don't notice a 
syntax issue. This seems to work fine:


$query  =< 42000
[1] => 1064
[2] => You have an error in your SQL syntax; check the manual that 
corresponds to your MariaDB server version for the right syntax to use 
near '')' at line 1

)

I have confirmed my script has  & \\

When I "search" using phpMyAdmin \ turns into  and \\ turns into 
   Is this what I should be using in order to get PHP to submit 
what I want into the database?


Thanks, Ron

Re: [PHP-DB] Removing slashes from the database

[Bastien Koert]

Ron,

If this is a display issue, have you tried running
stripslashes($outputstring) on the output from the database? That is the
usual way to handle it

Bastien

On Thu, Jun 4, 2015 at 7:29 AM Ron Piggott 
wrote:

>
> On 03/06/15 09:37, Aziz Saleh wrote:
> > On Wed, Jun 3, 2015 at 12:25 AM, Ron Piggott
> >  > > wrote:
> >
> > On 02/06/15 23:20, Aziz Saleh wrote:
> >> On Tue, Jun 2, 2015 at 11:08 PM, Ron Piggott
> >>  >> > wrote:
> >>
> >>
> >> On 02/06/15 22:58, Aziz Saleh wrote:
> >>>
> >>>
> >>> On Tue, Jun 2, 2015 at 10:50 PM, Ron Piggott
> >>>  >>> > wrote:
> >>>
> >>>
> >>> I am working through the process of removing \'s from
> >>> the database. I am trying to get this query using a
> >>> variable starting with "<<<"
> >>>
> >>> $query1  =<< >>> UPDATE `TABLE_NAME` SET `COLUMN_NAME` =
> >>>
>  REPLACE(REPLACE(REPLACE(`COLUMN_NAME`,'\\\'','\''),'\\\"','"'),'','\\');
> >>> EOF;
> >>>
> >>> But when I go to execute the query I am getting the error:
> >>>
> >>> |#1064 - You have an error in your SQL syntax; check the
> >>> manual that corresponds to your MariaDB server version
> >>> for the right syntax to use near
> >>> '\''),'\\"','"'),'\\','\')' at line 1 |
> >>>
> >>> Could someone help me know what \ and ' should be part
> >>> of this query so it will execute correctly --- only
> >>> removing \'s from the database table text columns?
> >>>
> >>> Thank you.
> >>>
> >>> Ron
> >>>
> >>>
> >>> When you say remove, as replace all occurrences with an
> >>> empty string, or replace with a different character?
> >> I want \" to become just "
> >> I want \' to become just '
> >> I also want however \ was escaped to become just \
> >>
> >> (I am trying to revert the text back to what it was
> >> originally before mysql_escape_string was applied)
> >>
> >> I hope this helps elaborate.
> >>
> >> Ron
> >>
> >>
> >> For simplicity sake, do each one in its own query and see which
> >> one breaks if any:
> >>
> >>
> >> $query1  =<< >> UPDATE `TABLE_NAME` SET `COLUMN_NAME` =
> >> REPLACE(`COLUMN_NAME`,'\"','"')
> >> EOF;
> >> $query2  =<< >> UPDATE `TABLE_NAME` SET `COLUMN_NAME` =
> >> REPLACE(`COLUMN_NAME`,"\'","'")
> >> EOF;
> >> $query3  =<< >> UPDATE `TABLE_NAME` SET `COLUMN_NAME` =
> >> REPLACE(`COLUMN_NAME`,'','\\')
> >> EOF;
> >>
> >> However, personally, I do not recommend this sort of action. Your
> >> data should be escaped in the DB. Your MySQL driver should be
> >> handling the escape/un-escape when setting/retrieving the data.
> > A friend pointed out to me today: In the earlier versions of PHP
> > there was a setting called 'magic_quotes_gpc'.  When enabled
> > slashes were added  by default. This setting has since been
> > depreciated as of PHP 5.3 and was removed completely in PHP 5.4.
> > I am using PHP 5.6.
> >
> > Thank you for the suggestion of running 3 separate commands.
> > Individually these execute successfully.  Is it even possible to
> > do a "REPLACE" in the fashion I have noted?
> >
> > Ron
> >
> >
> > It is possible, but sometimes with the clutter you don't notice a
> > syntax issue. This seems to work fine:
> >
> > $query  =<< > UPDATE `TABLE_NAME` SET `COLUMN_NAME` =
> > REPLACE(REPLACE(REPLACE(`COLUMN_NAME`,'','\\'),"\'","'"),'\"','"')
> > EOF;
> I am still having something weird happening which I don't understand.
>
> When I do print_r( $query ); the output is
>
> UPDATE `donation_paypal_code` SET `option` =
> REPLACE(REPLACE(REPLACE(`option`,'\\','\'),"\'","'"),'\"','"');
>
> and I receive the database error
>
> (
>  [0] => 42000
>  [1] => 1064
>  [2] => You have an error in your SQL syntax; check the manual that
> corresponds to your MariaDB server version for the right syntax to use
> near '')' at line 1
> )
>
> I have confirmed my script has  & \\
>
> When I "search" using phpMyAdmin \ turns into  and \\ turns into
>    Is this what I should be using in order to get PHP to submit
> what I want into the database?
>
> Thanks, Ron
>
>
>