PHP: How do I get rid of the slashes in a $_POST result?

Question

I have a form that contains the following code snippet:

*******

$encodedRecipeName = urlencode($recipeName);
echo " $encodedRecipeName . "\'>" . $recipeName;
**********
On the page that I want to display this information, I have the following code:

**********
$recipeName =$_POST['recipeName'];
$recipeName= trim($recipeName);
if (!$recipeName)
{
echo 'You have not entered search details. Please go back and try again.';
exit;
}

if (!get_magic_quotes_gpc())
{
$recipeName = addslashes($recipeName);
}
echo $recipeName;

**********

If $recipeName is "Grilled Chicken Sandwich", the result of the above code is:

\\\'Grilled+Chicken+Salad\\\'

How do I get rid of all the slashes, quotation marks, and plus signs?

Answer 1

Well, there's a simple rule: if you use encoding on the sending end, you must decode on the receiving end. So instead of

$recipeName = $_POST['recipeName'];

you should have

$recipeName = urldecode ($_POST['recipeName']);

Answer 2

You have single quotes surrounding the VALUE clause in the original form