Re: Removing Risky Characters

On 22 Mar 2003 David Otton wrote: > The thing that is most likely to trip you up is people who cut'n'paste > from Word. High-ASCII characters can slip in like that, also some > characters that are common in European languages (accents and umlauts). > All of these need to be translated into HTML entities. I understand that that needs to be done for display. My question was about input. What happens if someone enters an ASCII 147 or 148 in a form field, for example? Will PHP interpret them as quotes? Or is only an ASCII 34 seen as a quote. If the former, will addslashes() add shashes to them? ---------- Tom Rawson