On Mon, Jan 5, 2009 at 10:50 AM, Eduardo <vareedu@xxxxxxxxx> wrote: > Thanks, you all! > I tried near all suggestions, and Vicente's worked with > IE6 > Windows98SE > EasyPHP > > Eduardo > > > On 5 Jan 2009 at 4:36, Vicente wrote: > >> <textarea rows="5" name="tastes" cols="28"> <? echo $tastes;?> </textarea> > > > Unless you have taken steps to ensure that the value of $tastes does not include any HTML markup, you want to escape the value: <textarea rows="5" name="tastes" cols="28"> <? echo htmlspecialchars($tastes);?> </textarea> Andrew -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
