What's the best way to keep line breaks from a form entry to mysql and handle mysql escapes

Asked Jan 14 '16 at 22:53

Active Jan 18 '16 at 17:57

Viewed 22 times

I have a question I have been pondering for a while.

What is the best way of keeping line breaks to a MySQL db and handle the escapes so that the query doesn't fail.

I came up with a function to do this but I am not sure this is the right way to handle the string.

function nl2br2 ($string){
    $sqlescapes = array("'", ";");
    $string = str_replace($sqlescapes, "", $string); 
    return str_replace( "\n", '<br />', $string ); 
}

This function will replace PHP line breaks and replace them with <br/> so html can recognise them if I use mysqli_real_escape_string it removes the line break and this is the predicament.

Are there any other functions I could utilise, as the above removes grammar from the string?

edited Jan 18 '16 at 17:57

Mr Lister

45,515
15
108
150

asked Jan 14 '16 at 22:53

D Jones

2

Try [prepared statements](http://php.net/manual/en/pdo.prepare.php) in PDO – Nicholas Summers Jan 14 '16 at 22:55
1

Can you show how you're attempting to use this function? – jbafford Jan 14 '16 at 22:55
Hi guys thanks for your thoughts what this function will do is replace PHP line breaks and replace them with
so html can recognise them if I use mysqli_real_escape_string it removes the line break and this is the predicament – D Jones Jan 14 '16 at 23:03
mysqli_real_escape_string does not remove line breask – Jan 14 '16 at 23:09
When I used mysqli_real_escape_string it saved incorrectly and didn't preserve the line breaks – D Jones Jan 14 '16 at 23:13
then your doing something else – Jan 14 '16 at 23:14
checked PHP.net line breaks are escaped? The string to be escaped. Characters encoded are NUL (ASCII 0), \n, \r, \, ', ", and Control-Z. – D Jones Jan 14 '16 at 23:14
escaped, NOT removed – Jan 14 '16 at 23:14
Sorry how do I unescape these? Stripslashes? – D Jones Jan 14 '16 at 23:15
you dont, its purely for inserting the data. – Jan 14 '16 at 23:16
Let us [continue this discussion in chat](http://chat.stackoverflow.com/rooms/100713/discussion-between-d-jones-and-dagon). – D Jones Jan 14 '16 at 23:19

What's the best way to keep line breaks from a form entry to mysql and handle mysql escapes

0 Answers0