Thanks for a reply. I have just seen cake api and found sanitize class. I think it's something what i need :-)
On 30 Sty, 11:25, grigri <[EMAIL PROTECTED]> wrote: > Depends on what you mean by safe. It's safe to store and handle - it > won't mess up your server or database, that's certain. > > On the other hand, once you output it directly to the browser, all > sorts of things can happen: > > * Embedded <script> tags will be evaluated and run > * Embedded <object> tags can exploit weaknesses in IE and annoy > everyone else > * Embedded <style> / <link> tags could change your page's layout > * Someone could put a <bgsound> or <blink> element in and ruin your > reputation forever > * Bad / broken html could seriously mess up your page display > > The easiest way to handle all this is to use a HTML sanitizer, like > this one :http://www.phpclasses.org/browse/package/3746.html > > On Jan 30, 10:12 am, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > > > Hi, > > i'm going to use wysiwyg editor in my cake powerded app. In editor > > user could format text and source will be in html. My question is: > > Should I save editor text source in database without any modify? data > > will be in html - is it safe? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
