Depends on what you mean by safe. It's safe to store and handle - it won't mess up your server or database, that's certain.
On the other hand, once you output it directly to the browser, all sorts of things can happen: * Embedded <script> tags will be evaluated and run * Embedded <object> tags can exploit weaknesses in IE and annoy everyone else * Embedded <style> / <link> tags could change your page's layout * Someone could put a <bgsound> or <blink> element in and ruin your reputation forever * Bad / broken html could seriously mess up your page display The easiest way to handle all this is to use a HTML sanitizer, like this one : http://www.phpclasses.org/browse/package/3746.html On Jan 30, 10:12 am, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Hi, > i'm going to use wysiwyg editor in my cake powerded app. In editor > user could format text and source will be in html. My question is: > Should I save editor text source in database without any modify? data > will be in html - is it safe? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
