"i can't"

[dotJoon]

code
$query="SELECT say
FROM test
WHERE
n = 1
" ;
$sql = mysql_query($query);
$row = mysql_fetch_assoc($sql);
$say= $row['say'];

echo $say;

result

He said "I can't".

The code above produces the result above.

Following is some trials for putting the variable "$say" above into a form input tag, but all trials are failed.

trial code1

$inputSay='<input value="'.$say.'">';
echo $inputSay;

trial result1

he said

trial code2

$inputSay="<input value='".$say."'>";
echo $inputSay;

trial result2

he said "I can

trial code3

$say=mysql_real_escape_string($say);
$inputSay="<input value='".$say."'>";
echo $inputSay;

trial result3

he said "\"I can\

How can I get the following target result exactly in an input tag.

target result

he said "I can't".

[kduv]

Use addslashes() instead

$inputSay = '<input value="' . htmlspecialchars($say) . '">';
echo $inputSay; 

[tpunt]

trial code1

$inputSay='<input value="'.$say.'">';
echo $inputSay;

trial result1

he said

This outputs nothing because the above is equivilent to:

<input value=""I can't"">

The first double quote closes the value attribute.

trial code2

$inputSay="<input value='".$say."'>";
echo $inputSay;

trial result2

he said "I can

The above parses to the following:

<input value='"I can't"' />

The single quote closes the value attribute, hence why you've only receieved the value of "I can

trial code3

$say=mysql_real_escape_string($say);
$inputSay="<input value='".$say."'>";
echo $inputSay;

trial result3

he said "\"I can\

mysql_real_escape_string() should only be used for input into your database, not for output. HTML cannot escape special entities by preceding them with a backslash, which is why your message stops at the first single quote found (closing the value attribute).

How can I get the following target result exactly in an input tag.

target result

he said "I can't".

So what's the solution? Using the function htmlentities() or htmlspecialchars() to translate HTML equivilents into those entites to ensure they don't conflict with the pre-existing HTML code.

$say = htmlentities('"I can\'t"');
$inputSay = '<input value="'.$say.'" />';
echo $inputSay;