Can someone help with this please?

This site is best viewed in a modern browser with JavaScript enabled.

justadreamer

Hi,

I have an issue.

I am generating a php file with some contents in it such as an array.
The array values are coming from database values.
The array is as follows:

$array = array('key' => 'key_name', 'value' => 'db_value');

However, the db_value needs to be able to not break the php code such as special characters like !"£$%^{&*();'@:][{}#~?><,./}

Because the array 'Value' contents is wrapped in '' (single quotes) I am thinking that there could be a possibility of it breaking the php code and making the array not work.

Whats your thoughts on this?

Thanks for your help.

NogDog

If the value is coming from a variable or array element, no quoting is necessary: that's only needed for string literals.

$array = array('key' => 'key_name', 'value' => $valueRetrievedFromDatabase);

justadreamer

I don't think you understood what I meant or I didn't explain it correctly. Basically this array is being saved to a php page after clicking a button. So yes the value is coming from the db but it the PHP thats being generated is going to be saved as a php file for use else where.

Do you see what I mean mate?

Thanks

justadreamer

This is what is actually happening:


<?php //DB LOOP START ?>
$array = array('key' => '<?php echo $row['key']; ?>', 'value' => '<?php echo $row['value']; ?>');

<?php //DB END LOOP ?>

Then after that the file gets saved and called install.php

NogDog

Sounds like a job for htmlspecialchars() or htmlentities()?

justadreamer

thanks mate that sorted it.