Insert HTML from SQL into textarea?

Question

I would like to know why I am getting a "Parse error: syntax error, unexpected T_VARIABLE, expecting T_STRING" in my code, which pulls HTML off an MySQL database, replaces < and > with the entity (&lt ;, &gt ;) and inputs it into a textarea (CKEditor). Here is that section of the code:

<textarea name="editor1">
          <?php
            //QUERY DATABASE
            $query1 = "SELECT * FROM users WHERE ID = '" . $id . "'";
            $resource1 = mysql_query($query1, $database);
            $result1 = mysql_fetch_assoc($resource1);
            $rawcode = $result['code'];\
            $code1 = str_replace("<", "&lt;", "$rawcode");
            $code = str_replace(">", "&gt;", "$code1");
            echo $code1;          
          ?>
    <!--&lt;p&gt;Create your page here.&lt;/p&gt;-->
</textarea>

\ behind $rawcode = $result['code'];

whereismydipp
– whereismydipp

2013-09-12 01:49:52 +00:00
Commented Sep 12, 2013 at 1:49 — whereismydipp
– whereismydipp, Commented Sep 12, 2013 at 1:49

dkkumargoyal · Accepted Answer · 2013-09-12 01:47:38Z

1

you have an extra "\" at the end of line

$rawcode = $result['code'];\

remove it

answered Sep 12, 2013 at 1:47

dkkumargoyal

5563 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

David Houde Over a year ago

Please upvote any answers you found helpful, and mark this answer as correct if your problem is resolved.

Rocklan · Accepted Answer · 2013-09-12 01:47:16Z

0

Don't try to escape the HTML yourself, use htmlspecialchars() instead.

answered Sep 12, 2013 at 1:47

Rocklan

8,1993 gold badges39 silver badges51 bronze badges

2 Comments

rn10950 Over a year ago

what is this? The HTML is already in the DB, I just want to input it into CKEditor

David Houde Over a year ago

Replace the 2 str_replace lines with: $code = htmlspecialchars($rawcode);

Szpadel · Accepted Answer · 2013-09-12 01:51:45Z

0

$rawcode = $result['code'];\

backslash is escape char in php, and escaping $ in next line. PHP parse $code1 as string that is not allowed here.

you shouldn't also use $rawcode, and $code1 in "", because it only slows slightly execution.

answered Sep 12, 2013 at 1:51

Szpadel

613 bronze badges

Comments

David Houde · Accepted Answer · 2013-09-12 01:52:45Z

0

You have a syntax error in your code: Replace

 $rawcode = $result['code'];\

With

 $rawcode = $result['code'];

You can use htmlspecialchars() for your html replacement.

Replace:

$code1 = str_replace("<", "&lt;", "$rawcode");
$code = str_replace(">", "&gt;", "$code1");

With:

$code = htmlspecialchars($rawcode);

edited Sep 12, 2013 at 1:52

answered Sep 12, 2013 at 1:47

David Houde

4,7881 gold badge22 silver badges29 bronze badges

Comments

Nico · Accepted Answer · 2013-09-12 01:53:34Z

0

You have two error.

The first one is the $result variable from $rawcode = $result['code'];\. $result does not exist. You called that variable $result1.

The second one, is the \ at the end of $rawcode = $result['code'];\. You must remove it.

The end code is $rawcode = $result1['code'];

Another mistake I noticed, the last statement, echo $code1; should be echo $code; because $code contains the last change you made with str_replace.

answered Sep 12, 2013 at 1:53

Nico

7,0435 gold badges27 silver badges35 bronze badges

Collectives™ on Stack Overflow

Insert HTML from SQL into textarea?

5 Answers 5

1 Comment

2 Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

1 Comment

2 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related