Magic quote turned off but double quotes still escaped

Hi Jason,

I just realized that my checkout form (of my shopping site) cannot send double quotes and it seems everything but the first back slash is truncated.

e.g) I type in;

"this is a test"

in a text field in checkout form, then in confirm page it shows as;

\"this is a test \" .

In the database, the value is sent as just

\ .


I checked my server and magic quote is turned off in php.ini.

What could be a possibility for this?
I googled solutions, most of them were about magic quote.
I did see people saying you can use "stripslashes", but not sure if it's useful, or usable in my case. (If it's useful, could you show me how?)

Thank you,
Rika

there are a couple different magic quotes settings, magic quotes runtime an GPC Magic quotes, one of those is probably enabled.



to use stripslashes, add the following code at line 1 of the confirm page:

<?php

if($_SERVER["REQUEST_METHOD"] == "POST")     {

    foreach($_POST as $key => $val) {

        if(is_array($_POST[$key])) $_POST[$key] = stripslashes($_POST[$key]);

    }

}

?>

Thank you Jason,

I tried stripslashes code you showed me, but still no change.
Then I went back to my server and checked php.ini setting again,
these ones were all off.

magic_quotes_gpc = Off
magic_quotes_runtime = Off
magic_quotes_sybase = Off

Is this why the stripslashes isn't working?
If so what could be cause of this problem and any other solution?

I'll need to see the problem in order to troubleshoot the cause.

I have created a support ticket so we can look into this issue further.

To view and edit your support ticket, please log into your support history:
supporthistory.php

If anyone else is experiencing this same issue, please append to this thread.

Hi Jason, I totally forgot about this issue, now I'd like to solve it properly.
I looked into the situation again, then I noticed magic_quotes_gpc was not turned on all this time.

So I turned it off from .htaccess and it seems it's working this time finally, as now the texts entered on contact form with double quotes marks are passed perfectly to confirm page (without back slash, with double quotes marks.)
After this is the problem though. The email sent is missing texts after the first double quotation.

What could you suggest to solve this?

I attached confirm page php file just in case.

Thank you for your help.
Rika

I'll need to troubleshoot directly, see the private message section.

Hi Jason, here is the info for your testing.

Thank you for your help.

on the us_19_contact_confirm.php page, try adding this code to convert quotes to hTML entities:

<?php
if($_SERVER["REQUEST_METHOD"] == "POST")     {
    foreach($_POST as $key => $val) {
        $_POST[$key] = str_replace("\"","&quot;",$_POST[$key]);
    }
}
?>