PHP Text Processing
- Thread starter JonB
- Start date
Soldato
Uhh...
It kind of depends on what you want to do with it
It kind of depends on what you want to do with it
Aye, I guess. Sorry. Basically I'm making a comments system, and I wan't to make it easy / safe to store in a database / edit, without it screwing up and line spacing going wrong or odd characters displaying etc.
Specifically how to deal with new lines and how to deal with unwebsafe characters.
Specifically how to deal with new lines and how to deal with unwebsafe characters.
Soldato
I get you.
Firstly, you need to sanitise all your user input before it goes into the database. See robmiller's security guide:
http://php.robm.me.uk/#toc-SQLInjection
Once it's actually in the database and you want to display it, you need to make sure that it won't mess up the site's actual markup. For example, a user could put something like </body></html> in the text. You can use htmlspecialchars() to avoid this problem.
You should really read Rob's guide though as it's far more thorough
Firstly, you need to sanitise all your user input before it goes into the database. See robmiller's security guide:
http://php.robm.me.uk/#toc-SQLInjection
Once it's actually in the database and you want to display it, you need to make sure that it won't mess up the site's actual markup. For example, a user could put something like </body></html> in the text. You can use htmlspecialchars() to avoid this problem.
You should really read Rob's guide though as it's far more thorough