addslashes

Quote string with slashes

&reftitle.description; `string` `addslashes` `string` `string`

Returns a string with backslashes added before characters that need to be escaped. These characters are:

- single quote (`'`)
- double quote (`"`)
- backslash (`\`)
- NUL (the NUL byte)

A use case of `addslashes` is escaping the aforementioned characters in a string that is to be evaluated by PHP:

    <?php
    $str = "O'Reilly?";
    eval("echo '" . addslashes($str) . "';");
    ?>

The `addslashes` is sometimes incorrectly used to try to prevent SQL Injection. Instead, database-specific escaping functions and/or prepared statements should be used.

&reftitle.parameters;

`string`

- The string to be escaped.

&reftitle.returnvalues;

Returns the escaped string.

&reftitle.examples;

### An `addslashes` example

    <?php
    $str = "Is your name O'Reilly?";

    // Outputs: Is your name O\'Reilly?
    echo addslashes($str);
    ?>

&reftitle.seealso;

- `stripcslashes`
- `stripslashes`
- `addcslashes`
- `htmlspecialchars`
- `quotemeta`
- `get_magic_quotes_gpc`