Re: Quotes problem
| From: | jeremy brand | Date: | Thu, 19 Oct 2000 20:29:18 +0000 |
| Subject: | Re: Quotes problem | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-21266@lists.php.net to get a copy of this message | ||
Before you print back your form data, it is good programming practice
to always run it through htmlspecialchars(). There was a CERT
advisory about this last November -- why it took until Nov 1999 to
tell web programmers something that they should already know.
But, anyway, htmlspecialchars() -- and for the super paranoid there is
htmlentities().
-jeremy brand
_______________________________________________________________________
GnuPG Fingerprint: 9F5E 95E0 1CC2 E054 84EA 6099 8ACD 9DBA D2C0 5EA9
_ http://www.JeremyBrand.com/Jeremy/Brand/Jeremy_Brand.html
for more __
On Thu, 19 Oct 2000, Javier Leyba wrote:
> Date: Thu, 19 Oct 2000 17:21:42 -0300
> From: Javier Leyba <jleyba@sabueso.net>
> To: Lisdta PHP General <php-general@lists.php.net>
> Subject: [PHP] Quotes problem
>
>
> Hi All
>
>
> When my application receives data from a form I want to display it in an input text field on
> the next (and all subsequent) pages. I did it but I've one problem: if people put quotes or
> similar chars on the first form, when I try to show it in the next pages on the input field the
> stinrg appears cutted or simply show no data.
>
> How could I solve the problem ?
>
> I tried to enable / disable magic quotes on PHP config without success....
>
> I'm using PHP 4.0.2, Apache 1..3.12 and FastTemplate.
>
>
> Any idea ??
>
> Javier
>
>
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
>