user input killing code
| From: | redhat | Date: | Tue, 02 Dec 2003 15:49:01 +0000 |
| Subject: | user input killing code | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-31844@lists.php.net to get a copy of this message | ||
I am still working on this DB entry page. I have a sort of content mgt
page that I have built where certain company people input data to be
displayed on a web page to be viewed by the public. Everything is
working great except, when someone enters an ' or " into the form field
it will not update the database. I figured out that if you escape the '
or " with \ it will go through. I would like to know what I can do to
my code to keep users from having to remember this. Any suggestions?
thanks,
DF