Re: Editing in a text area field
| From: | ceo at l-i-e dot com | Date: | Fri, 09 Jan 2009 20:31:55 +0000 |
| Subject: | Re: Editing in a text area field | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-285901@lists.php.net to get a copy of this message | ||
>> Rule #1.
>> Never, ever, ever, alter the user's input, EXCEPT for
>> sanitizing/filtering.
>
>Probably shouldn't recommend sanitizing then. Only validate & reject. :P
mea culpa
I meant ESCAPING, of course.
If it doesn't pass sanitizing/filtering, it's probably better to just "reject"
and force re-entry by the user.