Re: Quotes problem
| From: | Johannes Schlüter | Date: | Thu, 19 Oct 2000 20:43:52 +0000 |
| Subject: | Re: Quotes problem | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-21270@lists.php.net to get a copy of this message | ||
Hi,
htmlentities() should also be used if the users could enter letters that arn't in [a-z0-9] like
in
some languages.
Johannes
Date sent: Thu, 19 Oct 2000 13:29:18 -0700 (PDT)
From: jeremy brand <jeremy@nirvani.net>
To: Javier Leyba <jleyba@sabueso.net>
Copies to: Lisdta PHP General <php-general@lists.php.net>
Subject: Re: [PHP] Quotes problem
> Before you print back your form data, it is good programming practice
> to always run it through htmlspecialchars(). There was a CERT
> advisory about this last November -- why it took until Nov 1999 to
> tell web programmers something that they should already know.
>
> But, anyway, htmlspecialchars() -- and for the super paranoid there is
> htmlentities().
>
> -jeremy brand
> _______________________________________________________________________
> GnuPG Fingerprint: 9F5E 95E0 1CC2 E054 84EA 6099 8ACD 9DBA D2C0 5EA9
> _ http://www.JeremyBrand.com/Jeremy/Brand/Jeremy_Brand.html for
> more __