RE: [PHP-DB] user input killing code
| From: | Hutchins, Richard | Date: | Tue, 02 Dec 2003 15:50:25 +0000 |
| Subject: | RE: [PHP-DB] user input killing code | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-31845@lists.php.net to get a copy of this message | ||
addslashes($userInput)
Rich
> -----Original Message-----
> From: redhat [mailto:redhat@fayelectric.com]
> Sent: Tuesday, December 02, 2003 10:49 AM
> To: php-db@lists.php.net
> Subject: [PHP-DB] user input killing code
>
>
> I am still working on this DB entry page. I have a sort of
> content mgt
> page that I have built where certain company people input data to be
> displayed on a web page to be viewed by the public. Everything is
> working great except, when someone enters an ' or " into the
> form field
> it will not update the database. I figured out that if you
> escape the '
> or " with \ it will go through. I would like to know what I can do to
> my code to keep users from having to remember this. Any suggestions?
> thanks,
> DF
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>