Stripping Special Characters out of a User Submitted Variable

[Guest]

Hello,

For the code below, I would like to strip apostrophes, periods, and slashes from the variable $find if the user enters them in.  How can I do that?  I would like to simply delete these characters, and not replace them with an underscore or anything like that.

Thanks in advance,

John

<div class="searchbox">
  <form action="search.php" method="post">
  <label>Enter Topic:
  <input type="text" name="find" size="55"/>
  <input type="hidden" name="searching" value="yes" />
  <input type="submit" name="search" value="Search" />
  </label>
  </form>
  </div>

[David_Powers · Accepted solution]

Use str_replace().

$illegal = array("'", ".", "/");
$find = str_replace($illegal, '', $_POST['find']);

[Guest]

Hi David,

Thanks, it works great.  However, I would like to also strip out double quotes, and I am having a hard time getting the code to do that.  How can I?

Thanks,

John

[David_Powers]

Just surround the double quote in a pair of single quotes:

$illegal = array("'", ".", "/", '"');