RE: [PHP] Question: Validation on a text field
| From: | Jay Blanchard | Date: | Thu, 04 Nov 2004 21:11:09 +0000 |
| Subject: | RE: [PHP] Question: Validation on a text field | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-201226@lists.php.net to get a copy of this message | ||
[snip]
May I ask why you are suggesting this function ?
> You can use htmlentities() on the information placed
[/snip]
Because it will convert things like quotes into their HTML counterparts
before you place them into the table. If you are reading it back out to
a web interface they get properly displayed without any manipulation.
http://www.php.net/htmlentities explains a little more
in depth. It is
one step towards preventing SQL injection and possible other hack
attacks.