Solving simple quotes and Php

Question

Sorry if that question has been already answered but what i found on the internet didn't help me that much.I got a problem with php and simple quotes

Here is my code :

echo "<span onclick='search(\"".$value."\");'>".some stuff."</span>";

My problem is that $value is sometimes with simple quotes (they are music titles). So i got some problems with 't' stands for trouble, can't stand losing you ...

I tryed with addslashes($value) but it does not work. Any idea ? Thanks :)

Answer 1

try with htmlspecialchars($value,ENT_QUOTES);

it's better also to get rid of all these slashes:

?>
<span onclick='search("<?=htmlspecialchars($value,ENT_QUOTES);?>");'>
    some stuff
</span>
<?php
// back to php

Answer 2

Maybe you can HTML encode ( http://php.net/manual/en/function.htmlentities.php ), it will make HTML entities out of the special characters in your titles. Be sure to decode on the recieving end though.

Answer 3

str_replace("'", "'", $value); 

should change quotes to their XML entity...

Answer 4

You may use htmlentities function:

echo "<span onclick='search(\"".htmlentities($value, ENT_QUOTES)."\");'>".some stuff."</span>";

Answer 5

your proper syntax should be something like this. Use htmlentites($value,ENT_QUOTES) to handle the special characters

$sanitizedValue  = htmlentites($value,ENT_QUOTES);

echo "<span onclick='search(\"{$sanitizedValue}\");'>some stuff</span>";