Dangerous characters

[Anon]

is there a way to safely use
<input type='hidden' name='fname' value='$fname'> that is going to be posted to another page and be able to use ANY charictor inside $fname including ' or " without having it output to the client

<input type='text' name='fname' value='I put an ' in this statement and the HTML cuts it off at the first ' '>

and then when it posts it only posts "I put an

[Anon]

Check out commands "urlencode", "addslashes" and "serialize" at php.net, depending on the variable type you're passing along.

Cheers!

[Anon]

Ok I now have used urlencode AND urldecode but after I pass it to the next page I bring it up for editing using
<input type='text' name='fname' value='$fname' size='25'>

and now if there is a ' the user sees everthing cut off there again... now what do I do?

or is there yet another solution?

[Anon]

If you are going to use method=get in your form (EG <FORM METHOD=GET> ) then use urlencode/decode.

If you are going to put it in a hidden data field, use addslashes/stripslashes. Please see my previous post!

-Ben