<?php
$str = "Hello world. (can you hear me?)";
echo quotemeta($str);
?>
The output of the code above will be:
Hello world\. \(can you hear me\?\)
(PHP 4, PHP 5, PHP 7, PHP 8)
quotemeta — Maskiert (quotet) Meta-Zeichen
$string
) : string
Der Inhalt von string
wird mit einem Rückstrich
("Backslash", \
) vor jedem Vorkommen von
string
Die Eingabezeichenkette.
Gibt die Zeichenkette mit maskierten Metazeichen zurück, oder false
,
falls eine leere Zeichenkette als string
übergeben
wurde.
Hinweis: Diese Funktion ist binary safe.
<?php
$str = "Hello world. (can you hear me?)";
echo quotemeta($str);
?>
The output of the code above will be:
Hello world\. \(can you hear me\?\)
Took me a while to realize this was NOT the command I wanted for escaping potentially harmful characters in a string that would be used as part of a system command. Instead, I needed either escapeshellarg() (http://www.php.net/manual/en/function.escapeshellarg.php) or escapeshellcmd() (http://www.php.net/manual/en/function.escapeshellcmd.php)
This function escapes characters that have special meaning in regular expressions. preg_quote() <http://php.net/manual/en/function.preg-quote.php> has similar functionality, but is more powerful since it escapes more characters (including one user-specified character).