Posted by Michael Fesser on 07/24/07 11:12

..oO(Sergei Riaguzov)

>No it should be just text. I ended up in:
>
>htmlspecialchars(stripslashes($_POST["blabla"]), ENT_QUOTES);

This might break if magic quotes are turned off! Only use stripslashes()
when necessary. See my other reply.

Micha

• Next in forum: Re: help in querying tables
• Prev in forum: Re: stripslashes vs quotes
• Thread view: Re: stripslashes vs quotes

[Reply to this message]