So Outside Technology Security CMS
AnQiCMS
Online Demonstration

Does the `addslashes` filter affect Chinese string characters? Will it escape Chinese punctuation marks?

Calendar 👁️ 72

In AnQiCMS, we frequently use various template engine filters to process and display content in our daily website operations.The filter is an important tool for improving content quality and website security.Today, let's delve deeply into a specific filter -addslashesLook at the impact it has on Chinese character strings and Chinese punctuation marks.

addslashesWhat does the filter do?

First, let's understandaddslashesThe basic function of the filter. According to the AnQiCMS template filter document introduction,addslashesThe main role of the filter is to add a backslash in front of thespecific predefined characters(in the string,\These characters are treated specially to avoid syntax errors or security issues in certain contexts (such as inserting into database query statements, JavaScript strings, or JSON data).In particular, it will escape:

  • Single quote (')
  • Double quote (")
  • Backslash (\)

When a string contains these characters,addslashesthey will be escaped by adding a backslash, turning them into ordinary characters so that they are not misunderstood by the parser.

addslashesWill it affect Chinese string?

For pure Chinese content,addslashesThe filter ishas no effect. AnQiCMS template engine has very good support for UTF-8 encoded Chinese,addslashesThe design did not escape the Chinese characters themselves.

Let me give you a simple example:

{{ "安企CMS是一个企业级内容管理系统。"|addslashes|safe }}

You will find that the output result is still:安企CMS是一个企业级内容管理系统。

This means, if the text you are processing only contains Chinese characters and does not involve the aforementioned English predefined special characters, thenaddslashesThe Chinese content will not change, you can use it with confidence.

addslashesCan it escape Chinese punctuation?

This is a point that everyone is concerned about. The answer is,addslashesFilterIt will not escape Chinese punctuation.It only processes English single quotes, double quotes, and backslashes, but not Chinese full-width punctuation marks such as periods (。), commas (，), colons (、), question marks (？), and quotes (“ ” ‘ ’This escaping is not performed when...

Let's verify this through an example:

{{ "这是一个测试。“安企CMS”真的很棒！你觉得呢？"|addslashes|safe }}

The output will be:这是一个测试。“安企CMS”真的很棒！你觉得呢？

Even if the Chinese string contains Chinese full-width quotation marks,...addslashesIt cannot be recognized that they are special characters that need to be escaped.

But if your Chinese string containsaccidentally mixed with English half-width punctuation(Single quotes, double quotes, or backslashes), then these English punctuation marks will beaddslashesEscape filter. For example:

{{ "他说:\"AnQiCMS's great!\" 我很赞同。"|addslashes|safe }}

The output will be:他说:\"AnQiCMS\'s great!\" 我很赞同。

You can see that the double quotes and single quotes in English half-width are preceded by a backslash. This further indicates,addslashesThe filter operates strictly according to the list of English special characters it is preset with, and will not intelligently recognize and process Chinese punctuation.

Summary

In the template development and content operation of AnQiCMS,addslashesThe filter is a very useful tool, mainly used to ensure that in specific scenarios, the English single quotes, double quotes, and backslashes in the data will not destroy the syntax structure or cause security issues.

Through our practical and documentation analysis, it can be clearly stated:

  • addslashesFilterwon'tIt affects the Chinese character string itself.
  • addslashesFilterwon'tEscape Chinese punctuation marks (such as。,，,“ ”etc.).
  • addslashesFilterOnlyEscape the single quotes in the English character set ('Punctuation marks (and) quotation marks (") and backslash (\)

Therefore, when usingaddslashesAt the same time, you need not worry that it will cause unexpected escaping of your Chinese content or Chinese punctuation.If English special punctuation is mixed in the Chinese text, please note that they will be escaped.Apply in templateaddslashesThe filter usually needs to be used in conjunction with|safeThe filter to ensure that backslashes are interpreted as escape characters rather than literal output, especially when the content includes HTML structure.

Frequently Asked Questions (FAQ)

1.addslashesandescapeWhat are the differences between filters?

addslashesMainly it is specificEnglish symbols(Single quotes, double quotes, backslashes) are preceded by a backslash to prevent these symbols from breaking the syntax in specific contexts (such as database queries, JavaScript code), and so on.escapeFilter (or its aliase) is used to represent HTML special characters (such as</>/&/"/') converts to HTML entities, the main purpose is to prevent XSS attacks, ensuring that the browser displays these characters as text rather than parsing them as HTML tags. AnQiCMS defaults to escaping all output, soescapeIt is usually used to explicitly specify escaping, or to manually perform HTML escaping after turning off automatic escaping.

2.addslashesDoes the filter affect the storage of content in the database?

addslashesThe filter is used to process data at the template rendering stage and does not directly affect the storage of content in the database.Databases usually have their own data input and storage mechanisms, and before data is written, it is often processed by backend programs (such as using pre-processing statements of ORM frameworks or manual escaping), to ensure that data can be safely and correctly stored in the database.addslashesIt mainly plays a role in displaying on the front end or preparing data for a specific front-end script.

3. If I want to remove HTML tags from the content instead of escaping, which filter should I use?

If you want to remove HTML tags from the content completely rather than escaping them, you can usestriptagsA filter that removes all HTML, XML, and PHP tags from a string. If you want to remove only specific HTML tags, you can useremovetagsFilter and specify the tag name to be removed in the parameter.

Related articles

If the string already contains a backslash, how will `addslashes` handle it? Will it add duplicates?

In AnQi CMS template development, handling special characters in strings is a common task.The `addslashes` filter is one of the tools, its main function is to add backslashes to the specific predefined characters in a string, to ensure that these characters are not misunderstood or destroyed in certain contexts (such as passing to database queries, JavaScript strings, or JSON data).But a common question is: What will `addslashes` do if the string already contains backslashes?

2025-11-07

Does the `addslashes` filter change the length of the original string? If so, by how much?

When building websites and handling user input, we often need to ensure the security and correctness of the data format.AnQiCMS (AnQiCMS) is an enterprise-level content management system developed based on the Go language, which provides a variety of filters in the template to help us complete these tasks.Among them, the `addslashes` filter is a practical tool for string processing.But when we use it, a natural question may arise in one's mind: Will this filter change the length of the original string?If it would, how much would it increase?

2025-11-07

I want to use AnQiCMS dynamic content in a JSON string, can the `addslashes` filter help?

In AnQiCMS templates, handling dynamic content and embedding it safely into JSON strings is a common requirement, especially when passing backend data to frontend JavaScript.When encountering such a situation, many users would naturally think of using `addslashes` and similar filters to handle special characters.Then, can the `addslashes` filter help in this regard?Let's delve into it.

2025-11-07

What is the priority and effect when the `addslashes` filter is used together with the `|safe` filter?

In the template development of Anqi CMS, we often encounter situations where we need to handle special characters or HTML content.The system provides a variety of filters to help us control the display of content more flexibly.Among them, the `addslashes` filter and the `|safe` filter are related to character processing, but their mechanisms and application scenarios are quite different.Understanding their specific functions and performance when used simultaneously is crucial for ensuring the safety and correct rendering of website content.### Understanding the default security mechanism of the Anqi CMS template First

2025-11-07

In what situations is it not recommended to use the `addslashes` filter to avoid unnecessary escaping?

During the daily content operation and template creation process of AnQi CMS, we often encounter various filters (filters), which can help us flexibly handle and display data.Among them, the `addslashes` filter is a relatively special and easily misused tool.It is intended to add a backslash before the specific characters in the string (such as single quotes `\'`, double quotes `\"`, and backslash `\\`) for escaping.However, in most cases, we do not recommend using the `addslashes` filter

2025-11-07

What would be the output if I apply the `addslashes` function to the same string multiple times?

In Anqi CMS template development, we often encounter situations where we need to perform special string processing.Among them, the `addslashes` filter is a tool used to add backslashes before specific characters, which is very useful when dealing with text containing special characters, especially to prevent some injection issues.But what would be the output if we apply the `addslashes` filter multiple times to the same string?

2025-11-07

Does the `addslashes` filter affect non-string types such as numbers, booleans, or objects?

In AnQi CMS template development, filters are important tools for processing and formatting data.Among them, the `addslashes` filter is often mentioned, which is used to add backslashes before certain predefined characters to ensure that strings can be correctly parsed in some contexts.However, when faced with non-string type variables, the behavior of this filter may raise questions: does it have an effect on numeric, boolean, or object type variables?

2025-11-07

What are the main differences between the `addslashes` filter and the `escapejs` filter, and when should each be used?

In AnQi CMS template development, in order to ensure content safety and the normal display of the page, we often need to process the output data.These are the filters `addslashes` and `escapejs`, which are powerful tools for handling special characters, but they have essential differences in their application scenarios and methods.Understanding these differences can help us choose the right tools at the right time, thereby improving the stability and security of the website.

2025-11-07