Re: php as default "value" in html

From: Date: Sun, 04 Apr 2004 16:47:55 +0000
Subject: Re: php as default "value" in html
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-182288@lists.php.net to get a copy of this message
Andy B wrote:
<input type="text" name="referred" value="<?echo htmlentities($old['Referred']);?>" accesskey="d" id="id-referred"> Other wise the value could have a double quote within it and a malicious user could effectively "end" your input text box and inject their own HTML."
is there any way to keep multiple users using the same form from mixing up variables
I have no idea what you mean here. ---John Holmes...

« previous php.general (#182288) next »