Ahh yes, that was exactly what I needed.  (I knew it was simple!)

But that brings up another question: whenever I have POST information
propagate over more than one page, is it generally a good idea to *always*
use htmlspecialchars () on my data?

I.e., even if the data shouldn't need htmlspecialchars () (numbers for
example), it seems like it wouldn't hurt to use that function just to make
sure nothing is lost.

Thanks again!
Matt

On Fri, Jul 20, 2001 at 02:18:09PM -0500, Brad S. Jackson wrote:
> And when you print the value back on the verification page, call
> htmlspecialchars() on the value.
> 
> echo "<input type=\"text\" name=\"blah\" value=\"" . htmlspecialchars($blah) .
> "\">";
> 
>> Whenever I try to submit text that contains a double quote character ("), the
>> submission gets truncated at the first occurance of a double quote and beyond.
>>  Single quotes don't seem to be problematic.

-- 
Matt Garman, [EMAIL PROTECTED]
"I'll tip my hat to the new constitution, Take a bow for the new revolution
 Smile and grin at the change all around, Pick up my guitar and play
 Just like yesterday, Then I'll get on my knees and pray..."
            -- Pete Townshend/The Who, "Won't Get Fooled Again"


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to