Welcome Guest, Not a member yet? Register   Sign In
form_prep appears to be broken in 1.7.2 html entities are no longer protected. Or was it broken before?
#6

[eluser]kenjis[/eluser]
[quote author="Kenji @ CodeIgniter Users Group in Japan" date="1266063088"]CI should use 1.7.1's no double encoding code again.
[/quote]

This is right when we think comaptibility is more important.

But 1.7.2's code is clean and better when we think that to store an html string containing html entities in a DB is bad practice.

Because html entities are only needed in html output. If you store an html string containing html entities in a DB, you must decode html entities when you mail the data.
If you want to seach the data, you must convert your keyword to html entities.

If you use 1.7.1 code, a string like "& must be written as &_amp;" is not processed correctly. Oh, this forum also, I add "_" after last "&" intentionlally.


Messages In This Thread
form_prep appears to be broken in 1.7.2 html entities are no longer protected. Or was it broken before? - by El Forum - 02-16-2010, 02:46 AM



Theme © iAndrew 2016 - Forum software by © MyBB