Re: Removing Risky Characters
| From: | David Otton | Date: | Sun, 23 Mar 2003 16:32:45 +0000 |
| Subject: | Re: Removing Risky Characters | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-140764@lists.php.net to get a copy of this message | ||
On Sun, 23 Mar 2003 10:51:43 -0500, you wrote:
>My question was about input. What happens if someone enters an ASCII
>147 or 148 in a form field, for example? Will PHP interpret them as
>quotes? Or is only an ASCII 34 seen as a quote. If the former, will
>addslashes() add shashes to them?
I see. No, they're not quotes in the PHP sense - they can be used as
part of a string literal without escaping.
However, in your example (form submission) it's a moot point - HTTP
multipart/form-data uses MIME (CRLF + a content boundary), not quotes,
to bracket data. See the end of
http://www.w3.org/TR/REC-html40/interact/forms.html
to get a feel for
what a raw form submit from a browser looks like.