5 replies to this topic

[sparkx]

Don't ask why but I need to make a long variable that contains ' " ; and ) meaning I cannot use:

$var=('Test');

It will create an error. Here is an example of what I am talking about:

$var=("I want to use ' and " while allowing html and not using htmlspecialchars");

Basicly is what I want is a <<<END variable. I know you can do this in an echo like:

echo<<<END
This is some echo. I can use ' " ) and; without using htmlspecialchars
END;

Is there a way to make a simalur code that works with variables? Do you get what I mean? That would really help me out.
Thanks,
Sparkx
Note: I need it for HTML and some HTML strings use both ' and " so I cannot use just one and make the string with the other.

[pyost]

According to php.net, there are only three ways of storing a string. The first one uses single quotes, the second one double quotes, and the third one uses the heredoc structure (<<<END ... END;). There are slight difference between the first two when it comes to escaping, but either way you would have to use \' or \". I think that heredoc is your best option, as it doesn't require any escaping and you can insert variables without any problems. Yes, it is somewhat bulky, but is great for outputting HTML code.

[TavoxPeru]

You can use the Chr() php function, this function returns a one-character string that contains the character specified by the ascii code passed to the function as a parameter.

For example try this code:

$var=chr(40) . chr(39) ."Test" . chr(39) . chr(59) . chr(41);
echo $var;

You can get all the ascii codes with the following function:

for($x=32; $x<256;$x++) {
echo "code = $x : char = " . chr($x) . "<br />";
}

I start the for with the value 32 -it is the space character- because all the prior characters are control characters that you don't need i guess, if you want change it to 1 and see what i'm talking.

BTW, sorry but right now i don't have more time to test if it would work fine with HTML code, maybe later i can.

Best regards,

[sparkx]

Thanks pyost and voxPeru. I am going to look at php.net for the <<<END and END; method for a string. If that does not work I many need to use the advanced looking chr() string. I know a little about the <<<END method and how it stops most php enjections ect.
Thanks again,
Sparkx

[vujsa]

I'm not sure if you ever got the answer that you needed. It is possible to simply escape the problematic quote like so:

$var = "That's the \"BEST\" option I have ever seen!";
echo $var;

Outputs:
Thats' the "BEST" option I have ever seen!

--OR--

$var = 'That\'s the "BEST" option I have ever seen!';
echo $var;

Outputs:
Thats' the "BEST" option I have ever seen!

--OR--

You can of course do it the easy way which is to use the heredoc method:

$var = <<<EOD
Thats' the "BEST" option I have ever seen!
EOD;
echo $var;

Outputs:
Thats' the "BEST" option I have ever seen!


For more information, here is a link to the PHP.net syntax for this option:
http://php.net/manua....syntax.heredoc

I hope that this helps you out.

vujsa

[vizskywalker]

Cool. I didn't know you could use heredoc to define variables. I never assumed you couldn't, just never thought about it. Useful to know.

~Viz