PHP - addslashes用法.docxVIP

addslashes(PHP 3, PHP 4, PHP 5)addslashes -- 使用反斜线引用字符串描述string addslashes ( string str )返回字符串，该字符串为了数据库查询语句等的需要在某些字符前加上了反斜线。这些字符是单引号（）、双引号（）、反斜线（\）与 NUL（NULL字符）。一个使用addslashes()的例子是当你要往数据库中输入数据时。例如，将名字Oreilly插入到数据库中，这就需要对其进行转义。大多数据库使用\作为转义符：O\reilly。这样可以将数据放入数据库中，而不会插入额外的\。当 PHP 指令magic_quotes_sybase被设置成on时，意味着插入时将使用进行转义。默认情况下，PHP 指令magic_quotes_gpc为on，它主要是对所有的 GET、POST 和 COOKIE 数据自动运行addslashes()。不要对已经被magic_quotes_gpc转义过的字符串使用addslashes()，因为这样会导致双层转义。遇到这种情况时可以使用函数get_magic_quotes_gpc()进行检测。例子 1. addslashes() 示例?php$str = Is your name Oreilly?;// 输出：Is your name O\reilly?echo addslashes($str);?User Contributed NotesPicky25-May-2006 03:55This function is deprecated in PHP 4.0, according to this article:/article.pl?sid=06/05/23/2141246Also, it is worth mentioning that PostgreSQL will soon start to block queries involving escaped single quotes using \ as the escape character, for some cases, which depends on the strings encoding. The standard way to escape quotes in SQL (not all SQL databases, mind you) is by changing single quotes into two single quotes (e.g, becomes for queries).You should look into other ways for escaping strings, such as mysql_real_escape_string (see the comment below), and other such database specific escape functions. 22-Jan-2006 03:59Probably good to take a look at /manual/en/function.mysql-real-escape-string.php . luciano at vittoretti dot com dot br31-Oct-2005 07:18Note, this function wont work with mssql or access queries.Use the function above (work with arrays too).function addslashes_mssql($str){if (is_array($str)) {foreach($str AS $id = $value) {$str[$id] = addslashes_mssql($value);}} else {$str = str_replace(, , $str); }return $str;}function stripslashes_mssql($str){if (is_array($str)) {foreach($str AS $id = $value) {$str[$id] = stripslashes_mssql($value);}} else {$str = str_replace(, , $str); }return $str;} thisisroot at gmail dot com27-Sep-2005 12:30In response to Krasimir Slavov and Luiz Miguel Axcar:There are several encoding