Re: Need help on putting variable into <form>

Wow, I'll try it! I don't think someone will put extra info into the cell, but you never know. Thanks, Hugh ----- Original Message ----- From: James Holloway <james@towntalk.co.uk> To: Hugh Danaher <hdanaher@earthlink.net> Sent: Tuesday, August 28, 2001 7:11 AM Subject: Re: Need help on putting variable into <form> > Hi Hugh, > > Most of your questions have been answered, but I thought you might also like > to consider this: > > htmlentities() and htmlspecialchars() > > If someone uses " or > in your variable, it might mess your form up: > > print "<input type=\"text\" size=\"30\" > name=\"comp_name\" value=\"$comp_name\">"; > > If they type ABC Company "The Best" > > it becomes: > print "<input type=\"text\" size=\"30\" > name=\"comp_name\" value=\"ABC Company \"The Best\"\">"; > > ^^^^^^^^^^ > > The form interprets the " before "The Best" as the end of the value for that > field. > > Using > print "<input type=\"text\" size=\"30\" > name=\"comp_name\" value=\"" . htmlentities($comp_name) . > "\">"; > > will cure any woes ;) > > http://www.php.net/manual/en/function.htmlspecialchars.php > http://www.php.net/manual/en/function.htmlentities.php > > James > > ----- Original Message ----- > From: "Hugh Danaher" <hdanaher@earthlink.net> > Newsgroups: php.general > To: "Php-General" <php-general@lists.php.net> > Sent: Tuesday, August 28, 2001 4:27 AM > Subject: Need help on putting variable into <form> > > > Help. I have a page with a form with lots of text boxes which can be filled > with data from a text file. the fopen() and fgets() works, and the text > boxes which require numbers have no problems. But, I have text boxes which > require several words of text and they refuse to work right. The first word > makes it in the box, but the rest of the words are lost. > > As an example, the data file contains: ABC Company, Inc. in the spot for > $comp_name. If I call for this variable elsewhere outside of a text box, it > prints in full, but when used by the following, it prints only: ABC > > print "<input type=text size=30 name=comp_name value=$comp_name>"; > > There must be something blindingly obvious that I'm missing. Please help. > Thanks, Hugh > > > >