Form Validation / Pre-populated input fields

[eluser]Maglok[/eluser]
You can just leave the third parameter empty to not check on anything with that field. xss_cleaning because you need to do something is kinda odd.

There is another issue with this though, at least in my opinion. Let's say it's an edit form, you grab data from a database, display it, check new values and update the database.

You'd determine which value the page should show like this (in bambooinvoice and other CI apps at least):

Code:

set_value('something')? $data['something']=set_value('something'):$data['something'] = $row->something;

The set_value can't see if you want a field to be empty or not though. This leaves room for the following scenario: Someone edits an exsisting thing, then empties a required field and a non-required field. It will then reload the page stating the required field is required AND it will repopulate both fields. Even if the non-required field is meant to stay empty.