Member Avatar for iamthwee

how to prevent this in codeigniter. The user may still wish to type this in so xss filtering is not an option

  • 2 Contributors
  • 4 Replies
  • 200 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by diafol
Member Avatar for iamthwee
Edited by iamthwee
Member Avatar for diafol

striptags?
htmlentities?

Member Avatar for iamthwee

Thanks my issue was that htmlentitites wasn't properly escaping the £ sign.

I thought it was a real ballache to write

htmlentities($string,ENQUOTES,"UTF-8");

in all my views. So I have created my own helper function which wraps it up.

Member Avatar for diafol

OK solved?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.