note 31222 deleted from function.stripslashes by aidan

Note Submitter: jpleveille at webgraphe dot com ---- Just to mention that you strip slashes, by example, in queries for databases, not for inputs in an HTML form (unless you display information coming from a variable altered by magic_quotes_gpc). Use htmlspecialchars() or htmlentities() in an input to set its value: <input type="text" value="<?php echo htmlspecialchars($value); ?>" /> As I mentioned before, you may want to stripslashes() $value if this value is coming from a variable altered by magic_quotes_gpc. htmlspecialchars() will avoid double-quotes of $value to enter in conflict with double-quotes of the input to set its value because double-quotes will, for example, be replaced by the string "&quot;". It is also important to do that in TEXTAREAs (or in any HTML form input). I already had the problem with a link I wanted to print in a TEXTAREA that contained a query like this: http://www.myserver.com/link.php?id=123&currentSection=Section%20Name The TEXTAREA (in IE & Mozilla) turned the part "&curren" into a special character, "¤", the Currency sign, even if no semi-colon was found ;) JP.