Re: security/sql issues with php

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



bruce wrote:
since i assume the '%x' chars traslate into something other than straight text,
i assume that the html function you mention strips out these chars, or it
returns a true/false if the data is valid. is this in essence what you're
talking about?

The %XX characters are URL encoded. They are regular characters in most cases, but they are characters that have a special meaning in the context of a URL. The encoding preserves them.

The htmlentities() function (that has been mentioned) is the same thing but for the context of HTML. It does nothing to determine whether data is valid (this is called filtering).

Hope that helps.

Chris

--
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux