stripslashes ( encodings to from MySQL )
| From: | Donovan Brooke | Date: | Fri, 28 Jan 2011 18:39:31 +0000 |
| Subject: | stripslashes ( encodings to from MySQL ) | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-47663@lists.php.net to get a copy of this message | ||
Hello,
I use mysql_real_escape_string() to
escape data for db population.
ie.
..form..
<textarea><?PHP stripslashes($dbvar); ?></textarea>
..recieving form input before db update..
$var =mysql_real_escape_string($var);
My question is regarding when wanting to allow HTML
within a database...
Will stripslashes also take out the slashes from something
like this?:
<span style="color:red;">some text</span>
That would effectively negated the ability to use HTML/CSS
in your db. If so, how do you get around this with safe data
entry?
TIA,
Donovan
--
D Brooke