addslashes og input

Til hvad? Hvornår?

hvis det er for at den skal sættes ind i en echo, kan du evt bare bruge '-er rundt om strengen.. eller sætte \-er foran alle dine "-er...
Hvis det derimod er for at sætte slashes på de output der kommer derfra, skal det først ske på den side de bliver sendt til.. Altså med en addslashes-kommando..

Hmm, jeg aner det ikke men jeg paster scriptet..
Det er lidt langt, men der skal kun addslashes på forfatterne.

<?php require_once('./Connections/local2.php'); ?>
<?php require("tjeklogin.php"); ?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
  $theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;   
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}

$editFormAction = $HTTP_SERVER_VARS['PHP_SELF'];
if (isset($HTTP_SERVER_VARS['QUERY_STRING'])) {
  $editFormAction .= "?" . $HTTP_SERVER_VARS['QUERY_STRING'];
}

if ((isset($HTTP_POST_VARS["MM_insert"])) && ($HTTP_POST_VARS["MM_insert"] == "form1")) {
  $insertSQL = sprintf("INSERT INTO second (forfatternavn_fornavn, forfatternavn_efternavn, anden_forfatter_fornavn, anden_forfatter_fornavn1, anden_forfatter_fornavn2, anden_forfatter_fornavn3, anden_forfatter_efternavn, anden_forfatter_efternavn1, anden_forfatter_efternavn2, anden_forfatter_efternavn3, alias, alias_fornavn, originalvaerkets_titel, udgivelsestidspunkt_original, genre, oversaetterens_fornavn, oversaetterens_efternavn, andre_oversaettere_fornavn, andre_oversaettere_fornavn1, andre_oversaettere_fornavn2, andre_oversaettere_fornavn3, andre_oversaettere_efternavn, andre_oversaettere_efternavn1, andre_oversaettere_efternavn2, andre_oversaettere_efternavn3,
  udgivelsessted, forlag, udgivelsestidspunkt_oversaettelse, antal_sider, antal_bind, bogserie_notat, oversættelsens_titel, notater, forkortet_udgave, illustreret_udgave, forord, efterskrift, stort_format_kunstudgave, kilde, land) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
                      GetSQLValueString($HTTP_POST_VARS['forfatternavn_fornavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['forfatternavn_efternavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_fornavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_fornavn1'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_fornavn2'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_fornavn3'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_efternavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_efternavn1'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_efternavn2'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['anden_forfatter_efternavn3'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['alias'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['alias_fornavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['originalvaerkets_titel'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['udgivelsestidspunkt_original'], "date"),
                      GetSQLValueString($HTTP_POST_VARS['genre'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['oversaetterens_fornavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['oversaetterens_efternavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_fornavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_fornavn1'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_fornavn2'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_fornavn3'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_efternavn'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_efternavn1'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_efternavn2'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['andre_oversaettere_efternavn3'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['udgivelsessted'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['forlag'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['udgivelsestidspunkt_oversaettelse'], "date"),
                      GetSQLValueString($HTTP_POST_VARS['antal_sider'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['antal_bind'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['bogserie_notat'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['oversttelsens_titel'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['notater'], "text"),
                      GetSQLValueString(isset($HTTP_POST_VARS['forkortet_udgave']) ? "true" : "", "defined","1","0"),
                      GetSQLValueString(isset($HTTP_POST_VARS['illustreret_udgave']) ? "true" : "", "defined","1","0"),
                      GetSQLValueString(isset($HTTP_POST_VARS['forord']) ? "true" : "", "defined","'Y'","'N'"),
                      GetSQLValueString(isset($HTTP_POST_VARS['efterskrift']) ? "true" : "", "defined","1","0"),
                      GetSQLValueString(isset($HTTP_POST_VARS['stort_t_kunstudgave']) ? "true" : "", "defined","'Y'","'N'"),
                      GetSQLValueString($HTTP_POST_VARS['kilde'], "text"),
                      GetSQLValueString($HTTP_POST_VARS['land'], "text"));

  mysql_select_db($database_local2, $local2);
  $Result1 = mysql_query($insertSQL, $local2) or die(mysql_error());

  $insertGoTo = "/sog.php";
  if (isset($HTTP_SERVER_VARS['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $HTTP_SERVER_VARS['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}
?>
<html>
<head>
<title>indtast post</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link rel="stylesheet" href="css/greenstyle1.css" type="text/css">
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_reloadPage(init) {  //reloads the window if Nav4 resized
  if (init==true) with (navigator) {if ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
    document.MM_pgW=innerWidth; document.MM_pgH=innerHeight; onresize=MM_reloadPage; }}
  else if (innerWidth!=document.MM_pgW || innerHeight!=document.MM_pgH) location.reload();
}
MM_reloadPage(true);
//-->
</script>
</head>

<body>
<div id="Layer1" style="Z-INDEX: 1; LEFT: 149px; WIDTH: 273px; POSITION: absolute; TOP: 4px; HEIGHT: 23px"><em><strong><font size="2">Créer
  une nouvelle entr&eacute;e</font></strong></em></div>
<div align="left"><em><strong><font size="2"> </font></strong></em></div>
<p align="center">&nbsp;</p>
<form method="post" name="form1" action="<?php echo $editFormAction; ?>">
  <div align="center">
    <table width="930" align="left">
    <input type="hidden" name="land" value="<?php echo $_SESSION["land"]; ?>">
      <tr valign="baseline">
        <td height="24" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left"><strong><em>Edition originale:</em></strong></div></td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td width="95" height="21" align="right" nowrap>&nbsp;</td>
        <td width="229" align="right" nowrap><div align="left">Auteur (prénom):</div></td>
        <td width="487"><input name="addslashes(forfatternavn_fornavn)" size="50" maxlength="100" ></td>
        <td width="99">&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Auteur (nom):</div></td>
        <td><input name="addslashes(forfatternavn_efternavn)" size="50" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Pseudonyme (pr&eacute;nom):</div></td>
        <td><input name="alias_fornavn" size="50" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Pseudonyme (nom):</div></td>
        <td><input name="alias" size="50" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Autre(s) auteur(s)(prénom):</div></td>
        <td>1.
          <input name="anden_forfatter_fornavn" maxlength="100" style="WIDTH: 100px; HEIGHT: 17px"
     
    > &nbsp; 2.
          <INPUT style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_fornavn1> &nbsp; 3.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_fornavn2> &nbsp; 4.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_fornavn3></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Autre(s) auteur(s)(nom):</div></td>
        <td>1.
          <input name="anden_forfatter_efternavn" maxlength="100" style="WIDTH: 100px; HEIGHT: 17px"
     
    > &nbsp; 2.
          <INPUT style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_efternavn1> &nbsp; 3.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_efternavn2> &nbsp; 4.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=anden_forfatter_efternavn3></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Titre original:</div></td>
        <td><input name="originalvaerkets_titel" size="60" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Date de publication:</div></td>
        <td><input name="udgivelsestidspunkt_original" size="10" maxlength="40" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="69" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Genre:</div></td>
        <td> <select name="genre">
            <option selected>Roman </option>
            <option>Nouvelle/récit </option>
            <option>Théâtre</option>
            <option>Poésie</option>
          </select></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="25" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left"><em><strong>Edition traduite:</strong></em></div></td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Traducteur (prénom):</div></td>
        <td><input name="oversaetterens_fornavn" size="50" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Traducteur (nom):</div></td>
        <td><input name="oversaetterens_efternavn" size="50" ></td>
        <td>&nbsp;</td>
      </tr>
      <TR>
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Autre(s) traducteur(s) (prénom):</div></td>
        <td>1.
          <INPUT style="WIDTH: 100px; HEIGHT: 17px"
      maxLength=100 name=andre_oversaettere_fornavn> &nbsp; 2.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_fornavn1> &nbsp; 3.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_fornavn2> &nbsp; 4.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_fornavn3></td>
        <td>&nbsp;</td>
      </TR>
      <TR>
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Autre(s) traducteur(s) (nom):</div></td>
        <td>1.
          <INPUT style="WIDTH: 100px; HEIGHT: 17px"
      maxLength=100 name=andre_oversaettere_efternavn> &nbsp; 2.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_efternavn1> &nbsp; 3.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_efternavn2> &nbsp; 4.
          <INPUT
      style="WIDTH: 100px; HEIGHT: 17px" maxLength=100
      name=andre_oversaettere_efternavn3></td>
        <td>&nbsp;</td>
      </TR>
      <tr valign="baseline">
        <td height="23" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Titre de la traduction:</div></td>
        <td><input name="oversttelsens_titel" size="60" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Date de publication:</div></td>
        <td><input name="udgivelsestidspunkt_oversaettelse" value="s.d." size="10" maxlength="40" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Lieu de publication:</div></td>
        <td><input name="udgivelsessted" size="40" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Editeur:</div></td>
        <td><input name="forlag" size="40" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="23" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Nombre de pages:</div></td>
        <td><input name="antal_sider" size="10" maxlength="100" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="21" align="right" valign="top" nowrap>&nbsp;</td>
        <td align="right" valign="baseline" nowrap><div align="left">Nombre de
            volumes :</div></td>
        <td><input name="antal_bind" id="antal_bind" size="10" maxlength="40" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="21" align="right" valign="top" nowrap>&nbsp;</td>
        <td align="right" valign="baseline" nowrap> <div align="left">Série:</div></td>
        <td><input name="bogserie_notat" size="70" maxlength="200" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Edition abrégée:</div></td>
        <td><input type="checkbox" name="forkortet_udgave" value="" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Edition illustrée:</div></td>
        <td><input type="checkbox" name="illustreret_udgave" value="" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Préface:</div></td>
        <td><input type="checkbox" name="forord" value="" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Postface:</div></td>
        <td><input type="checkbox" name="efterskrift" value="" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="20" align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Grand format/édition d'art:</div></td>
        <td><input type="checkbox" name="stort_format_kunstudgave" value="" ></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td height="63" align="right" valign="top" nowrap>&nbsp;</td>
        <td align="right" valign="top" nowrap> <div align="left">Note sur l'édition:</div></td>
        <td><TEXTAREA name=notater rows=5 cols=100></TEXTAREA></td>
        <td>&nbsp;</td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap>&nbsp;</td>
        <td align="right" nowrap><div align="left">Source:</div></td>
        <td colspan="2"><input name="kilde" size="70" maxlength="200" ></td>
      </tr>
      <tr valign="baseline">
        <td align="right" nowrap><div align="left"></div></td>
        <td align="right" nowrap>&nbsp;</td>
        <td colspan="2"><input type="submit" value="Conserver les données"></td>
      </tr>
    </table>
    <input type="hidden" name="MM_insert" value="form1">
  </div>
</form>
<p align="center">&nbsp;</p>
 

</body>
</html>

Er der ingen der ved hvordan man smider addslashes på denne fætter???

GetSQLValueString(addslashes($HTTP_POST_VARS['forfatternavn_fornavn']), "text"),

Sådan gør man det, husk når du så udskriver det igen at lave en stripslashes(værdi);

Det virker ikke..Jeg ville tro at det var i inputsætningen man skulle smide det.
Altså smide noget php ind i det øverste.

Den virker nu! Jeg fjernede noget af det øverste i scriptet - kanon.

Ligger du et svar?

Jeps - kanon at du fik det til at køre