Re: security/sql issues with php

bruce wrote:

since i assume the '%x' chars traslate into something other than straight text, i assume that the html function you mention strips out these chars, or it returns a true/false if the data is valid. is this in essence what you're talking about?

The %XX characters are URL encoded. They are regular characters in most cases, but they are characters that have a special meaning in the context of a URL. The encoding preserves them. The htmlentities() function (that has been mentioned) is the same thing but for the context of HTML. It does nothing to determine whether data is valid (this is called filtering). Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/