PHP 8 reference · String Functions

PHP addslashes() Function

Add a backslash before quotes, backslashes and NUL bytes. Not a safe way to build SQL: use prepared statements.

Create a free account to save this page, take notes and track your progress. Sign in

Syntax

addslashes(string $string): string

Parameter	Description
`string`	The input string.

The escaped string.

Escape quotesTry it yourself

<?php
echo addslashes("O'Reilly said \"hi\""), "\n";

Output

O\'Reilly said \"hi\"

Undo it with stripslashes()Try it yourself

<?php
$escaped = addslashes("It's here");
echo $escaped, "\n";
echo stripslashes($escaped), "\n";

Output

It\'s here
It's here

Version	Change
PHP 4.0	Added

htmlspecialchars() · Convert &, <, >, " and ' to HTML entities so user text is shown as text, not run as HTML. The main defence against XSS.
PHP Strings · tutorial
PHP PDO and Databases · tutorial