Bad Character in title

[hel68c]

Hi,

When I post an ad with an Apostrophe in the Title like: "Nice 'Cats' " The system return in the Title "Nice \'Cats\' ". The description is OK.

Look at this ads Nice 'Cats'

Look the title and the description.

When I work at localhost everything is fine but since I transfered everything on the server it look like this.

I looked at PHPAdmin the database and all the file are type InnoDB but the total MyISAM.

Do you thing it could be it?

[Eric Barnes]

It is probably because of different magic_quotes_gpc settings.

Did you add it locally and then import the database or add this new on the server?

[hel68c]

I add this new on the server.

If I remove the backslash character " \ " in phpadmin. It display correctly. If I add a new listing on the server, It add Backslash character.

[Eric Barnes]

Can you try this.

Open includes/functions.php and find:

function safeAddSlashes($theValue) 
{
    $theValue = (!get_magic_quotes_gpc()) ? stripslashes($theValue) : $theValue;
    $theValue = mysql_real_escape_string(trim($theValue));
    return $theValue;
}

Replace it with:

function safeAddSlashes($theValue) 
{
    $theValue = (get_magic_quotes_gpc()) ? stripslashes($theValue) : $theValue;
    $theValue = mysql_real_escape_string(trim($theValue));
    return $theValue;
}

[hel68c]

Nope does'nt work,

I remarked something, I can remove the " \ " in the admin and the phpadmin but not at the place ads.

[hel68c]

Hi Eric,

Do you fnd something else to correct this problem?

[Maffo]

I would recommend using HTML ENTITIES in your validation.

The correct ENTITY

' =& #39;

So in your validation you would need the PHP code

PHP Code:

$text_being_inspected = str_replace("'", "& #39;", $text_being_inspected); 


NOTE:I have place spaces between the & and the # so it displays on this page as code and not as an apostrophe. Be sure to remove the space!!

[hel68c]

I don't know if it can cause a problem, but in step3submit.php

I change this code:

PHP Code:

$data['title'] = isset( $_POST['title'] ) ? $format->inputSQL($_POST['title'], 'string') : ''; 


for this:

PHP Code:

$data['title'] = isset( $_POST['title'] ) ? $format->inputSQL($_POST['title'], 'stringHTML') : ''; 


and it work fine. Do you think it can cause a problem for the rest?