PHP Stripslashes Unexpected T-String Options

[Dante Monaldo]

I keep getting slashes "\" in my emails from this PHP contact form. I know to use string stripslashes, etc., but I can't seem to get it right. I keep getting an unexpected T-String error. Maybe I am putting it in the wrong spot?

Here is the code where it should go, somewhere around here...

CODE

    function clean_string($string) {
      $bad = array("content-type","bcc:","to:","cc:","href");
      return str_replace($bad,"",$string);
    }

    $email_message .= "Name: ".clean_string($name)."\n";
    $email_message .= "Email: ".clean_string($email_from)."\n";
    $email_message .= "Telephone: ".clean_string($telephone)."\n";
    $email_message .= "Comments: ".clean_string($comments)."\n";
    

I appreciate the help.

[Christian J]

CODE

$bad = array("content-type","bcc:","to:","cc:","href");
return str_replace($bad,"",$string);

You need to loop through the array and use str_replace on its items.

[Dante Monaldo]

Yes, but it's using the function clean_string on each variable. str_replace is a part of the function clean_string.

Or do I need to add backslashes as a part of the $bad variable?

This post has been edited by Dante Monaldo: Nov 18 2011, 10:37 AM

[Christian J]

Oops sorry, now I read that "An array may be used to designate multiple needles". Didn't know that was permitted.

I get no errors from this though:

CODE

function clean_string($string)
{
    $bad = array("content-type","bcc:","to:","cc:","href");
    return str_replace($bad,"",$string);
}

$email_message='';

$name="\content-type\"Name\"";
$email_from="to:\"Email\"";
$telephone="\"phone\"";
$comments="<a href=\"http://foo.com/\">link</a>";

$email_message .= "Name: ".clean_string($name)."\n";
$email_message .= "Email: ".clean_string($email_from)."\n";
$email_message .= "Telephone: ".clean_string($telephone)."\n";
$email_message .= "Comments: ".clean_string($comments)."\n";

echo $email_message;

OTOH it shouldn't remove the beginning backslash from $name either (in the other cases, backslashes are just used to escape the double quotes and will go away by themselves).

Or do I need to add backslashes as a part of the $bad variable?

As an extra array item? Might work, but then you may have to escape it with yet another backslash, like this:

CODE

$bad = array("\\","content-type","bcc:","to:","cc:","href");

[Dante Monaldo]

I knew I had the right idea, but I just couldn't get it right.

Thanks!

[pandy]

A feeling we are all well acquainted with. Well, maybe not Darin.