how to use stripslashes()

[omerbutt]

hi there i am working on a project based on php mysql and html now as i was using an more secure method to authenticate login information than simply getting the post variables and comparing it with the data base i came accross different functions like

isset()
empty()
stripslashes()

i got it right till isset and empty but when working with stripslashes i am not getting it right ,as far as i know that the purpose of stripslashes() is to remove any extra

' " / and \ etc


but as i tried to use it and in username input field i entered
\omer and tried to echo it after using stripslashes($_ POST['FIELD_NAME']); it still shows the" \ " in it
My code is here
[code=php]
<?
$msg="";
if(isset($_POST['Submit'])){
if(!empty($_POS T["l_name"]) && !empty($_POST["l_pass"])) {
if(isset($_POST["l_name"]) && isset($_POST["l_pass"])){
$mem_name=strip slashes($_POST["l_name"]);
$mem_pass=strip slashes($_POST["l_pass"]);
echo $mem_name.'<br />'.$mem_pass;
}
else{
$msg.="Good to see you Looser";
header("Locatio n: buzz.php?msg=". $msg);
exit();
}
}
else{
$msg.="The e-mail address / user name and password you entered did not match any accounts in our file. Please try again.";
}
}
else{
$msg.="Good to see you Looser";
header("Locatio n: buzz.php?msg=". $msg);
exit();
}
?>
[/code]
any help in this regard would be highly appreciated
regards,
Omer Aslam

[Markus]

stripslashes() only strips back slashes.

I can't understand why it isn't working =/

mysql_real_esca pe_string() is better off used. (you need to be connected to mysql for this to work)

[omerbutt]

stripslashes() only strips back slashes.

I can't understand why it isn't working =/

mysql_real_esca pe_string() is better off used. (you need to be connected to mysql for this to work)

yeah i am also surpeised that why isnt it working but now i have made some ammendments in my code here it is
[code=php]
$msg="";
if(isset($_POST['Submit'])){
if(!empty($_POS T["l_name"]) && !empty($_POST["l_pass"])) {
if(isset($_POST["l_name"]) && isset($_POST["l_pass"])){
$mem_name=$_POS T["l_name"];
$mem_name0=strt olower($mem_nam e);
$mem_name1=str_ ireplace("/","",$mem_name0 );
$mem_name2=str_ ireplace(",","" ,$mem_name1);
$mem_name3=str_ ireplace("'","" ,$mem_name2);
$mem_name4=str_ ireplace("*","" ,$mem_name3);
$mem_name5=str_ ireplace("and", "",$mem_nam e4);
$mem_name6=str_ ireplace("or"," ",$mem_name 5);
$mem_name7=str_ ireplace("where ","",$mem_name6 );
$mem_name=trim( $mem_name7);
echo $mem_name.'<br />'.$mem_pass;
}
else{
$msg.="Good to see you Looser";
header("Locatio n: buzz.php?msg=". $msg);
exit();
}
}
else{
$msg.="The e-mail address / user name and password you entered did not match any accounts in our file. Please try again.";
}
}
else{
$msg.="Good to see you Looser";
header("Locatio n: buzz.php?msg=". $msg);
exit();
}
[/code]
but one thing that how could i avoid
; and " from the entered string
any idea?
reagards,
Omer

[Markus]

You could do it quicker with preg_replace
[php]
$replace[0] = '#and#'; // replace and
$replace[1] = '#or#'; // replace or
$replace[2] = '#where#'; // replace where
$replace[3] = '#[\*;\'/\,\"]#'; // replace * ; ' , "
echo preg_replace($r eplace, "", "*heandlalwhere o;"); // do the replacement
[/php]

[ronverdonk]

Or you could use this one, [php]$memname=trim(s tr_ireplace(arr ay("/",",","'","*"," and","or","wher e"),'', strtolower($mem name)));[/php]Ronald

[Markus]

Or you could use this one, [php]$memname=trim(s tr_ireplace(arr ay("/",",","'","*"," and","or","wher e"),'', strtolower($mem name)));[/php]Ronald

Pah!
Defeated me again.

[ronverdonk]

Pah!
Defeated me again.

Not really, it is merely another way of solving it. ;-)

Ronald

[Markus]

Not really, it is merely another way of solving it. ;-)

Ronald

if str_ireplace() is case-insensitive is there any need for strtolower()?

[ronverdonk]

if str_ireplace() is case-insensitive is there any need for strtolower()?

Not for the replace, but the result string is also lower case.

Ronald

[omerbutt]

Or you could use this one, [php]$memname=trim(s tr_ireplace(arr ay("/",",","'","*"," and","or","wher e"),'', strtolower($mem name)));[/php]Ronald

thanks alots guys for a bunch of help and speacially ronverdonk who gave such a reduced code of just 1 line that was reallly excellent but 1 thing is stilll there that
CASE 1:
i want to remove WHITE SPACES from the username lets say if i enter
"omer aslam"
then it should remove the space between omer AND aslam but it is not doing it
CASE 2:
and if i enter only white spaces at the end of the name
i.e like this "omer " then in this case it removes the spaces but not in the first case EVEN IF I USE MY TECHNIQUE OR RONVERDONK'S
thanks alot anyways guys that you helped me so far.
Any help in this regard is highly appreciated.
Thanks in advance,
regards,
Omer Aslam.

[Markus]

[php]
$memname=trim(s tr_ireplace(arr ay(" ", "/",",","'","*"," and","or","wher e"),'', strtolower($mem name)));
[/php]

Try that

[omerbutt]

[php]
$memname=trim(s tr_ireplace(arr ay(" ", "/",",","'","*"," and","or","wher e"),'', strtolower($mem name)));
[/php]

Try that

THANKS ALOOOOOOOOOOOOO OOOOOOOOOT MAN you were really a THETA of PHP :D well just kiddin thats just because you have alots of experience but thats remarkable ;) i guess that was enough :D any how you really helped me out thanks alot guys again bundle of thanks for such efficient and quick reply
regards,
Omer.

[Markus]

THANKS ALOOOOOOOOOOOOO OOOOOOOOOT MAN you were really a THETA of PHP :D well just kiddin thats just because you have alots of experience but thats remarkable ;) i guess that was enough :D any how you really helped me out thanks alot guys again bundle of thanks for such efficient and quick reply
regards,
Omer.

Haha, ron was the op of that, i just tweaked it ever so slightly.

Remember, if there's anything else you want plucking out of the user input just add it into the array :)

[omerbutt]

Haha, ron was the op of that, i just tweaked it ever so slightly.

Remember, if there's anything else you want plucking out of the user input just add it into the array :)

yeah okay i did that because i had to remove some more extra characters so i did the same, but apart from the discussion ronverdonk really helped me alot he do was OP for that :D
take care alots ,
regards,
Omer.

[ronverdonk]

Consider it a joint solution. It really doesn't matter who originated what code.
In my opinion code should be shared freely. To me there is no such thing as 'ownership' of code, contrary to what a lot of programmers and companies think.

Ronald