Field with # does not appear in Mysql for _GET

Question

Good folks, I don’t know where to put the question..

I’m sorry if I’m in the wrong area!

Well, I’m racking my brain with a code on my page. The code works it sends the data to my database, only it is not sending a piece of the field for having this Character " # " there is only sending half.

Look at:

The result is coming only the end of the nick code doesn’t arrive=Test"#6287"

Look at the result in the database:

File Code process.php

<?php
$conexao = mysqli_connect("phpmyadmin", "user", "pass");
mysqli_select_db($conexao, "db");


     $novoemail = addslashes($_GET["novoemail"]);
     $nick = addslashes($_GET["nick"]);

       $inserir = "INSERT INTO ajuda (id, email, usuario) VALUES (NULL, '$novoemail', '$nick');";
        mysqli_query($conexao, $inserir) or die (mysqli_error($conexao));
        echo"";
    ?>

Answer 1

You’ll have to encode it, because the # direct is recognized by the browser with "dynamic URL" which is used primarily to interact in front-end, with HTML, CSS and Javascript, including made a response on the subject:

• /a/235335/3635

Having understood why this fails now let’s go to the step of correcting, for it to work you will have to encode (change in case) the # for %23, or is going to stay like this:

[email protected]&nick=teste%236287

But rest assured, when you use $_GET['nick'] will return teste#6287 perfectly.

If the link is generated by your script then for ease you can use urlencode(), more or less thus:

<?php
$email = urlencode('[email protected]');
$nick = urlencode('teste#6287');

echo '<a href="processar.php?novoemail=' . $email . '&nick=' . $nick . '">Link</a>';
?>

Something else, DON’T USE addslashes to escape in mysqli, this function may even work apparently, but does not have this purpose, even more depending on codecs (variations of utf8, latin1, etc.) around, so depending on the codecs maybe some character may cause syntax error, so do not do this:

 $novoemail = addslashes($_GET["novoemail"]);
 $nick = addslashes($_GET["nick"]);

The ideal is to use the proper function for this, mysqli_real_escape_string, thus:

 $novoemail = mysqli_real_escape_string($conexao, $_GET["novoemail"]);
 $nick = mysqli_real_escape_string($conexao, $_GET["nick"]);

Answer 2

What you may be doing is separating the shipping field :

meusite/ir/parse.php? [email protected]&nick=Teste&num=6287

And then "join" the two in PHP:

$nick = addslashes($_GET['nick'] . "#" . $_GET['num']);