Re: Quotes problem

From: Date: Thu, 19 Oct 2000 20:43:52 +0000
Subject: Re: Quotes problem
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-21270@lists.php.net to get a copy of this message
Hi, htmlentities() should also be used if the users could enter letters that arn't in [a-z0-9] like in some languages. Johannes Date sent: Thu, 19 Oct 2000 13:29:18 -0700 (PDT) From: jeremy brand <jeremy@nirvani.net> To: Javier Leyba <jleyba@sabueso.net> Copies to: Lisdta PHP General <php-general@lists.php.net> Subject: Re: [PHP] Quotes problem > Before you print back your form data, it is good programming practice > to always run it through htmlspecialchars(). There was a CERT > advisory about this last November -- why it took until Nov 1999 to > tell web programmers something that they should already know. > > But, anyway, htmlspecialchars() -- and for the super paranoid there is > htmlentities(). > > -jeremy brand > _______________________________________________________________________ > GnuPG Fingerprint: 9F5E 95E0 1CC2 E054 84EA 6099 8ACD 9DBA D2C0 5EA9 > _ http://www.JeremyBrand.com/Jeremy/Brand/Jeremy_Brand.html for > more __

« previous php.general (#21270) next »