Welcome Guest, Not a member yet? Register   Sign In
active record double-quote issue
#1

[eluser]jupiter1031[/eluser]
I am using active record for updating and inserting data. Now I have an input field that requires double quotes. The system just rejects the input.Single quotes worked but the client wants double quotes. The documentations says everything is automatically escaped.
#2

[eluser]InsiteFX[/eluser]
This all done to prevent SQL Injection, this what you have to try to explain to your customer!

InsiteFX
#3

[eluser]jupiter1031[/eluser]
Ok, thank you!
But this still leaves me with the question how to enter double quotes in a form input. Anz suggestions for that?
#4

[eluser]InsiteFX[/eluser]
You could also create your MY_form_helper from form_help and add your fix, but I would not recommend this!

This is the function that is causing you your problem in the form_helper!
Code:
function form_prep($str = '', $field_name = '')

InsiteFX
#5

[eluser]Madmartigan1[/eluser]
Quote:The system just rejects the input.

This could be a lot clearer. There's no good reason you wouldn't be able to $_POST quotes, or save them to the database. Do you think that nobody uses quotes???




Theme © iAndrew 2016 - Forum software by © MyBB