Re: [PHP] Removing Risky Characters

2003-03-23 Thread David Otton
On Sun, 23 Mar 2003 10:51:43 -0500, you wrote: >My question was about input. What happens if someone enters an ASCII >147 or 148 in a form field, for example? Will PHP interpret them as >quotes? Or is only an ASCII 34 seen as a quote. If the former, will >addslashes() add shashes to them?

Re: [PHP] Removing Risky Characters

2003-03-23 Thread trlists
On 22 Mar 2003 David Otton wrote: > The thing that is most likely to trip you up is people who cut'n'paste > from Word. High-ASCII characters can slip in like that, also some > characters that are common in European languages (accents and umlauts). > All of these need to be translated into HTML en

Re: [PHP] Removing Risky Characters

2003-03-22 Thread David Otton
On Sat, 22 Mar 2003 09:34:03 -0500, you wrote: >When validating user input to remove quotes and other characters that >can be used for hacks, does one need to be concerned about the high- >ASCII characters which have 'quote' meanings (e.g. 0x91 - 0x94). I >presume not, but just wanted to verify

[PHP] Removing Risky Characters

2003-03-22 Thread Tom Rawson
When validating user input to remove quotes and other characters that can be used for hacks, does one need to be concerned about the high- ASCII characters which have 'quote' meanings (e.g. 0x91 - 0x94). I presume not, but just wanted to verify that PHP will not interpret these as quotes. ---