我不知道为什么我的PHP代码preg_match不接受来自HTML文本区域的输入,因为它有括号或返回:
以下是相关的PHP:
/* Check for Ingredient Description */
if (preg_match ('%^'s*[A-Za-z0-9','.'' '-'"'(')]{30,2048}$%', stripslashes(trim($_POST['ingredient_descrip']))))
{
$idscr = escape_data($_POST['ingredient_descrip']);
}
else
{
$idscr = FALSE;
echo '<p><font color="red" size="+1">
Please enter an ingredient description!</font></p>';
}
自定义函数escape_data如下所示:
$dbc = mysql_connect (DBHOST, DBUSER, DBPW)
function escape_data ($data)
{
if (function_exists('mysql_real_escape_string'))
{
global $dbc;
// Need the connection.
$data = mysql_real_escape_string (trim($data), $dbc);
$data = strip_tags($data);
}
else
{
$data = mysql_escape_string (trim($data));
$data = strip_tags($data);
}
// Return the escaped value.
return $data;
}
以下是调用文本区域输入的相关HTML:
<form action="ingredient_form.php" method="post" enctype="multi-part/form-data">
<fieldset>
<p><b>Ingredient Description:</b></p>
<p><textarea cols="100" rows="20" name="ingredient_descrip"></textarea><?php if (isset($_POST['ingredient_descrip'])) echo $_POST['ingredient_descrip']; ?></p>
</fieldset>
<div align="center"><input type="submit" name="submit" value="Submit Proposed Ingredient Profile" /></div>
<input type="hidden" name="submitted" value="TRUE" />
我尝试删除preg_match,只接受文本区域输入,然后使用preg_replace函数重新获得格式并使用以下代码进行测试:
if ($_POST['ingredient_descrip'])
{
$idscr = stripslashes(trim($_POST['ingredient_descrip']));
echo "<p>" .$idscr. "</p>";
$idscr = escape_data($idscr);
echo "<p>" .$idscr. "</p>";
$idscrp = preg_replace("/['r'n]+/", "<br />", $idscr);
echo "<p>" .stripslashes($idscrp). "</p>";
}
preg_replace似乎也没有发挥作用。出于测试目的,我将其放入文本区域:
This is a (test)
Why isn't it working?
but
我的回波结果返回为:
This is a (test) Why isn't it working? but
This is a (test) 'r'nWhy isn''t it working? 'r'nbut
This is a (test) rnWhy isn't it working? rnbut
preg_replace应该用break替换''r''n,然后stripestrash应该去掉转义符中的剩余字符。我错过了什么?
使用nl2br()用<br />
标记替换新行,而不是尝试用preg_replace()
重新发明轮子。
也就是说,你的preg_replace()
呼叫对我有效:
$str = <<<STR
foo
bar
baz
STR;
var_dump($str);
$str = preg_replace("/['r'n]+/", "<br />", $str);
var_dump($str);
输出:
string(11) "foo
bar
baz"
string(21) "foo<br />bar<br />baz"