PHP/JavaScript WYSIWYG/MySQL Problem....

Codewalkers Forums Sponsor:

Stay one step ahead of the competition. Evaluate and give feedback on some of the hottest web development tools on the market today. Make your opinion heard! Click Here

October 24th, 2003, 06:05 AM

Red93CobraR

Join Date: Apr 2007

Posts: 1

Time spent in forums: < 1 sec
Reputation Power: 0

PHP/JavaScript WYSIWYG/MySQL Problem....

Okay, I have a problem. I am using a JavaScript based WYSIWYG Editor for a CMS. The Javascript is dynamically creating the HTML which is then being passed to a PHP sql_query and into the DB.

Unfortunately, the quotes generated in the HTML (ie: <a href="test.html">TEST</a>) are ending the SQL query so I only get the following code in the table:

<a href=

Here is the code I'm using currently, with the "addslashes" function which isn't working:

php Code:

Original - php Code

 
 
<?php
  
mysql_connect (localhost, carlberg_admin, admin);
      
mysql_select_db (carlberg_cms);  
 
if (isset($_POST['submit'])) {
    mysql_query ('INSERT INTO test (Content) VALUES ("'.addslashes($_POST['text1']).'")');
    }
   
    include ('includes/admin_header.htm');
 
    ?> 
 
<table width="500">
    <tr>
        <td height="100">
    </tr>
    <tr>
        <td>
 
<form action="<?php $_SERVER['PHP_SELF'] ?>" method="POST" name="RichTexteditor" id="RichTexteditor" onSubmit="submitForm(); return true;">
<iframe id="testFrame" style="position: absolute; visibility: hidden; width: 0px; height: 0px;"></iframe>
<script language="JavaScript" type="text/javascript" src="browserdetect.js"></script>
<script language="JavaScript" type="text/javascript" src="richtext.js"></script>
<script language="JavaScript" type="text/javascript">
<!--
function submitForm() {
     try {
          text1.innerHTML = '<input type="hidden" name="text1" value="' + document.getElementById('edit').contentWindow.docu  ment.body.innerHTML + '">';
     }
     catch (e) {
          text1.innerHTML = '<input type="hidden" name="text1" value="' + document.getElementById('edit').value + '">';
     }
return true;
}
 
Start();
//-->
</script>
<noscript><p><b>Javascript must be enabled to use this form.</b></p></noscript>
 
<p>Click submit to show the value of the text box.</p>
<p><input type="submit" name="submit" value="Submit"></p>
<span id="text1">&nbsp;</span>
</form>
        </td>
    </tr>
</table>
<?php
 
include("includes/admin_footer.htm");
 
?>

Any help would be GREATLY appreciated!

--Adam

October 24th, 2003, 06:38 AM

CodeKadiya

Join Date: Apr 2007

Location: Colombo,Sri Lanka

Posts: 2,313

Time spent in forums: < 1 sec
Reputation Power: 4

RE: PHP/JavaScript WYSIWYG/MySQL Problem....

Use '' before your double quotations.

Code:

<a href="test.htm">Click here</a>

or just use single quotes.

Code:

<a href='test.htm'>Click here</a>

October 24th, 2003, 05:36 PM

brut

Join Date: Apr 2007

Posts: 367

Time spent in forums: < 1 sec
Reputation Power: 2

RE: PHP/JavaScript WYSIWYG/MySQL Problem....

Here are a couple of built in functions:
mysql_escape_string()
addslashes()

Thread Tools	Search this Thread
Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: