#19. Julien Paquit on 23 September 2008

Kevin : you are totally right. That was just a tip ;)

#18. Kevin on 21 September 2008

@ Julien Paquit: Thank you but I believe PHP does not do that automatically? If not, then we should not either, because we may surprise developers & cause unexpected output.

#17. Julien Paquit on 21 September 2008

Very useful code ! Because of some scripting needs (and compatibility), I add this portion of code to the original one :

return (str+'').replace(/(["])/g, """).replace(/([\\'])/g, "\\$1").replace(/\0/g, "\\0");

Now I am able to pass recursively parameters without errors.

#16. Kevin on 27 August 2008

@ Nate & Onno Marsman: Awesome job guys! I have been fooled by my tester for a long time. Addslashes has ben updated, and you have been credited accordingly. I've also changed the new testsuite to support addslashes behaviour.

#15. Onno Marsman on 08 August 2008

It's probably also a good idea to convert str to a string to make sure .replace exists.
addslashes(6) does work in PHP but not in this function

return (str+'').replace(/([\\"'])/g, "\\$1").replace(/\0/g, "\\0");

#14. Nate on 22 July 2008

I couldn't get the function to work at first. I made some changes, and here is what I came up with:

return str.replace(/([\\"'])/g, "\\$1").replace(/\0/g, "\\0");

Also, the example should read,
"kevin\\\'s birthday" because the \' becomes '. That is why it appears to work in the tester script.

#13. Kevin on 31 May 2008

@ Dudi: That's just my blog messing up 'addslashes'. Fixed though.

#12. Dudi on 30 May 2008

It doesn't seem like the function works. And the example is wrong again. ;-)

#11. Sean Gallagher on 24 May 2008

Here is another quicky but good add slashes function!

P.S. I could not get your function to work.

function addslashes(str)
{
  // http://www.atlwebsite.com
 // By Sean Gallagher
 // Example: addslashes('what "ya\'ll" doing?')
 // Returns: what \"ya\'ll\" doing?
 str = str.replace(/'/g,"\\'");
 return str.replace(/"/g,'\\"');
}

#10. Kevin on 13 April 2008

@ Jonas Raoni: I believe your proposal has the same regex, only here it's singlequoted for compatbility with Dean Edwards packer.

#9. Jonas Raoni on 12 April 2008

It's missing the "\" escape.

return str.replace(/(["'\\])/g, "\\$1").replace(/\0/g, "\\0") ;

Or
... [more]
return str.replace(/(["'\\\0])/g, function(_, n){
return "\\" + (n == "\0" ? "0" : n);
});

#8. Kevin on 01 March 2008

@ Martin: Fixed!

#7. Kevin on 28 February 2008

@ Martin: Thanks for noticing. If you look at the source code, you see that the example is correct. But my blog probably filters out the backslash again. I'll look into it!

#6. Martin on 27 February 2008

example 1 (the only one) on this page is incorrect, in that it doesn't actually add the slash. hehe.

#5. Kevin on 23 January 2008

@ Ates Goral: Processed.

#4. Ates Goral on 23 January 2008

Additional test case:

// *     example 2: addslashes("\"'\\\0");
    // *     returns 2: "\\\"\\\'\\\\\\\0"

#3. Ates Goral on 23 January 2008

First, just a nitpick:

A set of characters can be used instead of the ORs:

return str.replace(/(["'\\])/g, "\\$1");

To add support for NUL:

return str.replace(/(["'\\])/g, "\\$1").replace(/\0/g, "\\0");

#2. Kevin on 22 January 2008

@ booeyOH: It sure is! Thank you!

#1. booeyOH on 21 January 2008

preg_quote() function for adding slashes to RegEx

Not sure if it is out there, but needed something quick, hope its helpful

function preg_quote( str ) {
  var quote_chars = ["\\", ".", "+", "*", "?", "[", "^", "]", "$", "(", ")", "{", "}", "=", "!", "<", ">", "|", ":"];
  var return_val = str;
  
  for(var i=0;i<quote_chars.length;i++)
    {
    eval("var pattern = /\\"+quote_chars[i]+"/gi");
    return_val = return_val.replace(pattern, chr(92)+quote_chars[i]);
    }
  
  return return_val;
}