Re: quickform: htmlspecialchars() is in the way

Justin Patrin wrote:

On 6/20/05, Jeroen Houben <jeroen@terena.nl> wrote:

Hi, I have a problem where I want a value of a hidden element to NOT be escaped by htmlspecialchars(). Is this possible? It doesn't seem to be since it is based on HTML_Common which has no options for specifying these kinds of things..

Please explain why you want this. If you don't run htmlspecialchars on attributes you can quite easily get invalid HTML. It would be wrong in any situation I can think of to not run htmlspecialchars on a value. Actually IMHO it should be htmlentities, but anyway... Hi Justin,

I was having some problems where I needed to set a value of a hidden form field to an encrypted string to be sent using the GET method. The value actually set by quickform had &quote; etc in it and I couldn't seem to get the original value out at the other end. I then switched to using rawurlencode() on the string before sticking it in the hidden form field and using rawurldecode() on the other end to decode it. Now it works and I can successfully decrypt the string, but I'm not entirely sure if it's the simplest way. Jeroen