> Right now, when I type in 5" and save it to the database, it displays as
> 5" and when I update that field in a form, it comes out of the database
> as 5" too ...  I guess I am confused when you mentioned that the updating
> would be the " or other ugly characters...

I didn't remember off-hand if htmleditformat() included double-quotes as one
of the fields it escapes, but I know it escapes greater than or less than
symbols, so... say for instance, a user inputs

Hello -> there

into a text field, then goes back and updates that data, they'll see

Hello -> there

in the form field if you've htmleditformatted the data going into the
database...

Or they'll actually see -> but when you view source you will see -> in
the form... So they'll save that and then the next time they go to edit it
they _will_ see -> or worse yet -&gt&#xx; in the field...

I have a sneaky suspicion ( though I can't test it right now ) that
htmleditformat() doesn't check for existing html special characters, so if
you use htmleditformat(htmleditformat(myvar)) it will progressively make the
string longer and longer as it continues to htmleditformat the & and ;
characters in all the html special characters.

Test it out -- save something from a form with 5", then edit that data gain
in the same form and view the source -- if the " is in the field visible to
the user, I'll bet you anything that the data is actually " and then
save it again and you'll actually see " in the field...

hth

Isaac Dealey

www.turnkey.to
954-776-0046
______________________________________________________________________
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to