Posted by Geoff Berrow on 03/29/06 15:33

Message-ID: <V0tWf.18925$%d.8259@tornado.socal.rr.com> from Larry
contained the following:

>I guess I'm back to stripping all the special characters out before they get
>put into the database. Hmmmm...

No, you don't need to do that.
Just use htmlentities($sting, ENT_QUOTES)

But I'll echo the other concerns about security...

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/

[Back to original message]