PHP, reading files, and escaping characters

**Wynd** · Nov 18th, 2001, 09:46 PM

I am trying to make a PHP script that lets you edit files from a web page, like Geocities. I can view the file fine, but if I save it all the quotes and backslashes get escaped. How can I prevent this?

This is the code I am using:

PHP Code:


<html>

<head>

<title>File editor</title>

<link rel="stylesheet" type="text/css" href="/main.css">

</head>

<body>

<?

$dirname = substr(strrchr(getcwd(), "\\"), 1);

$disp_name = $filename;

if ($mode == 1) {

    echo "<h3>Editing: " . $disp_name . "</h3>";

    $pFile = fopen($filename, "rb");

    $oldContents = fread($pFile, filesize($filename));

    fclose($pFile);

?>

<form method="post" action="<?=$PHP_SELF?>?filename=<?=$filename?>&mode=2">

<textarea rows="30" cols="70" name="newContents" wrap="off"><?=htmlspecialchars($oldContents)?></textarea>

<br><br>

<input type="submit" value="Save changes">

<input type="button" value="Reload file" onClick="window.location.href='edit.php?filename=<?=$filename?>&mode=1';">

<input type="button" value="Return to Index "onClick="window.location.href='index.php';">

</form>

<?

}



if ($mode == 2)

{

    $pFile = fopen($filename, "wb");

    fwrite($pFile, $newContents);

    fclose($pFile);

    echo "<h3>Saved: " . $filename . "</h3>";

?>

<form method="post" action="<?=$PHP_SELF?>?filename=<?=$filename?>&mode=2" name="a">

<textarea rows="30" cols="70" name="newContents" wrap="off"><?=$newContents?></textarea>

<br><br>

<input type="submit" value="Save changes">

<input type="button" value="Reload file"onClick="window.location.href='edit.php?filename=<?=$filename?>&mode=1';">

<input type="button" value="Return to Index "onClick="window.location.href='index.php';">

</form>

<? } ?>

</body>

</html>

**da_silvy** · Nov 19th, 2001, 05:07 AM

$newContents = htmlspecialchars($newcontents);
fwrite($pFile, $newContents);

not tested but i think that should work

**Wynd** · Nov 19th, 2001, 06:41 PM

No, doesn't work

**Wynd** · Nov 20th, 2001, 06:26 PM

No, that doesn't work either.

Thread: PHP, reading files, and escaping characters

Thread Tools

Display

PHP, reading files, and escaping characters

Posting Permissions