DaniWeb Forum Index > Web Development > PHP

";:<script><html>< // >@@#";

Please support our PHP advertiser: PostgreSQL or MySQL? Compare and contrast the two most popular open source databases

•

Join Date: Jun 2007

Posts: 57

Reputation: naju is an unknown quantity at this point

Solved Threads: 2

naju

Offline

Junior Poster in Training

";:<script><html>< // >@@#";

Jan 28th, 2009

if some users insert data like
";:<script><html>< // >@@#";

then i Sanitize this data to something like
";:<script><html>< // >@@
before inserting to db
when i print this form db to html

for inside <p> tag its cool but for inside h1 tag is prints as it is
<h1>";:<script><html>< // >@@</h1>
output: ";:<script><html>< // >@@

<p>";:<script><html>< // >@@</p>
output: ";:<script><html>< // >@@#";

now i need to corrent on h1 tag to make similar to <p> tag

thanks

Hunters Never Hurt

•

Join Date: Oct 2006

Posts: 938

Reputation: ardav will become famous soon enough

Solved Threads: 123

ardav

Online

Posting Shark

Re: ";:<script><html>< // >@@#";

Jan 28th, 2009

You need to html_entity_decode() the string before outputting to html. If you checkout your database entry (through phpmyadmin or whatever it's called or a good GUI), you'll probably see that the " .... has changed to &quot; ....