On Mon, Jan 5, 2009 at 10:50 AM, Eduardo <vare...@gmail.com> wrote:
> Thanks, you all!
> I tried near all suggestions, and Vicente's worked with
>        IE6
>        Windows98SE
>        EasyPHP
>
> Eduardo
>
>
> On 5 Jan 2009 at 4:36, Vicente wrote:
>
>> <textarea rows="5" name="tastes" cols="28"> <? echo $tastes;?> </textarea>
>
>
>


Unless you have taken steps to ensure that the value of $tastes does
not include any HTML markup, you want to escape the value:

<textarea rows="5" name="tastes" cols="28"> <? echo
htmlspecialchars($tastes);?> </textarea>



Andrew

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to