• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 238
  • Last Modified:

Strip apostrophe from variable

When I submit a form with containing an apostrophe in one of the form fields - i.e. Women's Health, results from that field are blank. This is what I'm using but it's not working:

<INPUT TYPE="text" NAME="DIRECT_GIFT_TO_OTHER" VALUE="" />

and on the action page:

$donation_to .= str_replace("'", "",$DIRECT_GIFT_TO_OTHER)."<br>";
0
phillystyle123
Asked:
phillystyle123
  • 5
  • 3
  • 3
  • +1
5 Solutions
 
Robert SchuttSoftware EngineerCommented:
It would take a bit more info to come up with a real solution, but it is usually not necessary to strip anything out. Just use the right encoding for html or sql. What is being done with the output on the action page, just shown as html? (judging from the <br>) That shouldn't even need encoding but you could use htmlspecialchars().
0
 
David CarrCommented:
Be sure you do not have magic quotes turned on.
0
 
phillystyle123Author Commented:
How would htmlspecialchars() work?
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
Robert SchuttSoftware EngineerCommented:
Well like I said it depends what you want to do but in your context I guess:
$donation_to .= htmlspecialchars($DIRECT_GIFT_TO_OTHER)."<br>";

Open in new window

0
 
phillystyle123Author Commented:
Still not outputting if there is an apostrophe. So, in the following example, Mens Health will output, but Men's Health will not.

Form field:

<INPUT TYPE="text" NAME="DIRECT_GIFT_TO_OTHER" VALUE="" />

Action page code:

//donation to
      
      $donation_to = "";
      
            if($DIRECT_GIFT_TO_OTHER!="")
      {
            $donation_to .= htmlspecialchars($DIRECT_GIFT_TO_OTHER)."<br>";
      }
0
 
Robert SchuttSoftware EngineerCommented:
Please define 'output'. In your code nothing is being output. Is it being echoed to the page? The context probably matters.
0
 
Ray PaseurCommented:
@phillystyle123, couple of suggestions:

1. add error_reporting(E_ALL) to the top of your scripts.
2. learn about mysql_real_escape_string().
3. use htmlentities() or similar for browser output, not for internal use.
4. have a look at this article (may or may not be in play here, but you'll know that as soon as you read the article)
http://www.experts-exchange.com/Web_Development/Web_Languages-Standards/PHP/A_6630-Magic-Quotes-a-bad-idea-from-day-one.html

Instead of describing the symptoms, if you can post the link to the SSCCE, we will be able to answer you immediately with complete accuracy.  

Thanks and regards, ~Ray
0
 
phillystyle123Author Commented:
I have no problem awarding points for this, but the question (and this is my fault) left out one very important factor that I didn't think had anything to do with it. It's turned out that Authorize.net's ARB API doesn't allow for any characters. I ended up using a javascript in the form fields that eliminates single quotes/apostrophes on keyup:

<INPUT  onkeyup="if (/'/.test(this.value)){this.value=this.value.replace(/'/g,'')}" onblur="this.onkeyup()" TYPE="text" NAME="DIRECT_GIFT_TO_OTHER" VALUE="" />
0
 
Ray PaseurCommented:
Interesting (and thanks for the points).  Since I am working with a class that is studying eCommerce right now, can you tell us anything more about this restriction from Authorize.net?  Is this documented anywhere that you could find?  Thanks and regards, ~Ray
0
 
phillystyle123Author Commented:
I didn't see it anywhere in the documentation. No trace of the issue that I could find. So I reached out to authorize.net tech support.
0
 
Ray PaseurCommented:
Thanks for the heads-up!  Best, ~Ray
0
 
phillystyle123Author Commented:
Came up with a different solution because I discovered that Authorize.net's ARB API doesn't allow the use of single quotes, apostophes in form fields.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 3
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now