Re: How to escape apostrophe in HTML textbox exactly???
| From: | Torsten Roehr | Date: | Wed, 30 Jun 2004 17:02:50 +0000 |
| Subject: | Re: How to escape apostrophe in HTML textbox exactly??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-189312@lists.php.net to get a copy of this message | ||
"Scott Fletcher" <scott@abcoa.com> wrote in message
news:20040630165221.37283.qmail@pb1.pair.com...
> I'm using data that goes from the HTML textbox to PHP to MYSQL to PHP to
> HTML textbox. The only trouble I have is to escape the apostrophe
character
> when it is put into the HTML textbox by PHP (from MySQL).
>
> --snip--
> echo "<input type='textbox'
> value='".$value."'>";
> --snip--
>
> I can't use the HTML feature like " or something because the """
> would show up in the database... Any suggestion or advice?
You CAN use " - convert your data AFTER getting it from the DB. When
you submit the form the " will be automagically converted back to a "
in the POST data. I recommend writing a function you run on all data for
outputting as HTML with htlmentities().
1. get data from DB
2. convert for valid HTML output (stripslashes(), htmlentities())
3. output as HTML (into the form elements)
4. get POST data
5. escape POST data and insert into DB again
Hope this helps.
Regards, Torsten Roehr