Double Backslashes all of a sudden.

Magic Quotes disabled and PHP version 5.2.17 Using CS5 to help build PHP queries. I spoke to the hosting company today and they say nothing has changed at their end.

I have a very frustrating problem that I have tried to solve all day but cannot.

I have a site that all of a sudden 3 of the forms are entering backslashes into the database and I cannot find out why. I understand that quotes are escaped with a single backslash but when I output the $updateSQL query I can see in ‘source view’ for example the following:

UPDATE home_r  SET home_r_details='style=\\\"text-align: center;\\\"><img src=\\\"../../image_home/toms.jpg\\\" alt=\\\"\\\" width=\\\"116\\\" height=\\\"116\\\" />

I have also tried this locally by downloading the entire DB and running queries and they are all giving me the same problem as the live site. I have tried rebuilding some of the DB tables in case they are corrupt but again no luck. This form is just populated by a simple query and has no ‘Post’ values passed to it. The main update query I’m using is the CS5 PHP version here:

 if (!function_exists("GetSQLValueString")) {

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 

{

  if (PHP_VERSION < 6) {

    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  }

   $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

   switch ($theType) {

    case "text":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;    

    case "long":

    case "int":

      $theValue = ($theValue != "") ? intval($theValue) : "NULL";

      break;

    case "double":

      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";

      break;

    case "date":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;

    case "defined":

      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;

      break;

  }

  return $theValue;

}

}

$editFormAction = $_SERVER['PHP_SELF'];

if (isset($_SERVER['QUERY_STRING'])) {

  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);} 

if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "form1")) {

  $updateSQL = sprintf("UPDATE home_r  SET home_r_details=%s WHERE id=%s",

                       GetSQLValueString($_POST['home_right_details'], "text"),

                       GetSQLValueString($_POST['id'], "int"));

  mysql_select_db($database_+++++, $+++);

  $Result1 = mysql_query($updateSQL, $+++++) or die(mysql_error());

Now what makes this more frustrating is that I have a similar form that is working perfectly however this one does use a Post value but I can’t see how that might be an issue however I thought I’d point this out here.

$colname_Getblogupdate = "1";

if (isset($_GET['id'])) {

  $colname_Getblogupdate = (get_magic_quotes_gpc()) ? $_GET['id'] : addslashes($_GET['id']);

}

mysql_select_db($database_++++++, $+++++);

$query_Getblogupdate = sprintf("SELECT * FROM blog WHERE id = %s", $colname_Getblogupdate);

$Getblogupdate = mysql_query($query_Getblogupdate, $+++++) or die(mysql_error());

$row_Getblogupdate = mysql_fetch_assoc($Getblogupdate);

$totalRows_Getblogupdate = mysql_num_rows($Getblogupdate);

So I’m really stumped by this and have run out of things to try. With security at the forefront I’m not taking changes so any help would be appreciated. I can’t see if there has been any major updates but possible there have so if anyone can suggest what might be causing this I’d be most grateful. All these Forms and queries are under a login and are just for a client to administer things.

Many thanks