change \ to \\ for path php

Question

I have a string which is a path and is a variable in which I have to save in my database. But the path is

C:\foldera\folderb\folder1\folder2

and obviously I need it to be

C:\\foldera\\folderb\\folder1\\folder2

for the insertion in database of mysql.

Please help me find the solution. I tried str_replace but it won't work. Thanks in advance.

http://php.net/manual/en/mysqli.quickstart.prepared-statements.php — sdespont, Jan 15 '15 at 20:47
please if you can give me some hints. I have no idea what to search for and I need it to continue my project. — Adnama, Jan 15 '15 at 20:47
His question is how to escape backslashes not prevent SQL injection attacks. However it is a helpful link to point him to. — Richard Christensen, Jan 15 '15 at 21:08
For paths in PHP, just use forward slashes. They work fine, even on Windows platforms - the PHP engine converts them. — halfer, Mar 27 '15 at 22:47

Richard Christensen · Answer 1 · 2015-01-15T21:06:19.700

-1

The function you are looking for is addslashes($string); This function adds the slashes to turn your string into the string you are looking for. But if you are planning on using it as a parameter in an SQL statment you want to use mysqli_real_escape_string()

Also use single quotes in the string in order for addslashes() to work properly. double quotes will parse it as \f not just '\'.

edited Jan 15 '15 at 21:06

answered Jan 15 '15 at 20:48

Richard Christensen

2,046
17
28

1

No, it's not. [What's the difference between PHP's addslashes and mysql(i)\_escape\_string?](http://stackoverflow.com/q/4486016) – mario Jan 15 '15 at 20:49
I need to change '\' to '\\' do you have any idea how please? – Adnama Jan 15 '15 at 20:52
1

@Adnama: No, you don't need to change '\' to '\\'. You need to learn how to SQL-escape a string, or use parameters. – SLaks Jan 15 '15 at 20:54
No because when I used it with one slash, the database saved it as 1 string, and ignored the slashes. and it saved it as : – Adnama Jan 15 '15 at 20:56
C:folderafolderbfolder1folder2 – Adnama Jan 15 '15 at 20:57
are you using double quotes or single quotes – Richard Christensen Jan 15 '15 at 20:57
I am using: $_SESSION['currentPath'] = getcwd(); $curpath=$_SESSION['currentPath']; $path = $curpath.'\\'.$newpath; INSERT INTO file (`id`,`path`)VALUES(('$id','$path'); Please help – Adnama Jan 15 '15 at 21:17

change \ to \\ for path php

1 Answers1