Hi all,
I try to figure out what the best option is to escape my data. I have an
UTF-8 website so actually it's fine to work with the original characters
(and no need for htmlentities() or htmlspecialchars()). Nevertheless all my
data comes from a database and the data is inserted with all quotes escaped.
That means by display the texts I need for every variable a stripslashes().

Stripslashes() everywhere is very ugly and gives cluttered code in all my
view scripts. What's the best option to strip the slashes automatically?
Replace the escape function by stripslashes() replaces the problem by
another: $this->escape() everywhere instead of stripslashes(). Is it better
to escape the variables automatically by overriding the __set() from
Zend_View_Abstract? Another (fail prove) systems to have a smart system to
escape my data?

Thanks in advance,
Jurian

Reply via email to