Re: php as default "value" in html
| From: | John Holmes | Date: | Sun, 04 Apr 2004 16:47:55 +0000 |
| Subject: | Re: php as default "value" in html | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-182288@lists.php.net to get a copy of this message | ||
Andy B wrote:
<input type="text" name="referred" value="<?echo htmlentities($old['Referred']);?>" accesskey="d" id="id-referred"> Other wise the value could have a double quote within it and a malicious user could effectively "end" your input text box and inject their own HTML."I have no idea what you mean here. ---John Holmes...is there any way to keep multiple users using the same form from mixing up variables