Re: [PHP] Form Annoyances

2002-02-27 Thread Steven Walker

James,

Look into stripslashes():
http://www.php.net/manual/en/function.stripslashes.php

and htmlspecialchars():
http://www.php.net/manual/en/function.htmlspecialchars.php

Steven J. Walker
Walker Effects
www.walkereffects.com
[EMAIL PROTECTED]

On Wednesday, February 27, 2002, at 11:08  AM, James Taylor wrote:

> I'm having this one issue that's really bugging me - I have a textarea 
> where
> you can type in something - After typing it in, it goes to another page
> asking you to verify, if it's correct, it inserts it into a database.
>
> The page that asks you to verify holds the value of the textbox in a 
> hidden
> form field.  If the value the user entered in contains any single (') or
> double (") quotes, it will mess everything up.  Single quotes end up 
> having a
> backslash thrown automatically in front of it, and it inserts it into 
> the
> database WITH THE backslash.  If there are double quotes, the HTML will 
> get
> messed up due to the fact that when it sees the quote, it will cut off 
> the
> rest of the value because if:
>
> value="this is an example: "Hello how are you"." >
>
> everything after example: is going to get cut off.
>
> I tried putting the value in a query string, but when traveling across 
> two
> pages, it seems to do the exact same thing.
>
> Any suggestions?
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[PHP] Form Annoyances

2002-02-27 Thread James Taylor

I'm having this one issue that's really bugging me - I have a textarea where 
you can type in something - After typing it in, it goes to another page 
asking you to verify, if it's correct, it inserts it into a database.

The page that asks you to verify holds the value of the textbox in a hidden 
form field.  If the value the user entered in contains any single (') or 
double (") quotes, it will mess everything up.  Single quotes end up having a 
backslash thrown automatically in front of it, and it inserts it into the 
database WITH THE backslash.  If there are double quotes, the HTML will get 
messed up due to the fact that when it sees the quote, it will cut off the 
rest of the value because if:

value="this is an example: "Hello how are you"." >

everything after example: is going to get cut off.

I tried putting the value in a query string, but when traveling across two 
pages, it seems to do the exact same thing.  

Any suggestions?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php