php drop down menu 1

[bccamp]

I'm having trouble with "'" in my drop down menu. I've got a value: "Women's Stuff" in 2 drop down menu's. One is a static javascript menu:
<option value="page.php?cat=Women's Stuff">Women's Stuff

and page.php picks up the cat with no problem.

Other menu is DB driven:
while ($author=mysql_fetch_array($result)) {
$aid=$author['name'];
$aname=htmlspecialchars($author['name']);
echo "<option value='$aid'>$aname</option>
</select><submit> so on and so on

but only ?cat=Women gets passed through. Thought about ereg_replace, but that still doesn't pass "'" through.

Where and how can I fix this?

 

[kenrbnsn]

You're getting caught because you're not escaping the single quote or otherwise disguising it in your "echo" statement. Using one of the following code pieces should work:

echo '<option value="' . $aid . '">' . $aname . "</option>\n";

$aid = addslashes($author['name']);
$aname=htmlspecialchars($author['name']);
echo "<option value='$aid'>$aname</option>

$aid = urlencode($author['name']);
$aname=htmlspecialchars($author['name']);
echo "<option value='$aid'>$aname</option>

Ken

 

[bccamp]

Thanks Ken,

Used the first code and added an:
if ($q=="localhost") {ereg_replace("'","\'",$string);}
to my local server to make it work.

Yahoo doesn't need the 'if' statement, but my newer version of mysql does. Workarounds for the workarounds!

Thanks again. NEVER would have gotten that without you.

 

[kenrbnsn]

You're runing up against the "Magic Quotes" on/off problem. Take a look at

http://www.php.net/magicquotes

for more information.

Ken