Posting Variables with ' " s

[Anon]

I have a strange problem
I am posting several hidden form variables
to another php script.
if I echo $row->description;
in the initial script I get 24" dia ...
then after passing it to another script via a hidden form variable it
and I echo $description
I get 24
Here's what I know
if I change the value of $row->description and get rid of the " it works fine.
So now I guess I will use addslashes to see
if this fixes this. But Is this a bug or feature , will geting solve this problem?

[benpeter]

That is because if you issue something like

<INPUT TYPE="HIDDEN" NAME="myvar" VALUE="<?php echo $myvar>">, the result in the browser will be

<INPUT TYPE="HIDDEN" NAME="myvar" VALUE="24 " dia"> which does not make much sense.

You should use something like
<INPUT TYPE="HIDDEN" NAME="myvar" VALUE="<?php echo htmlentities($myvar)>">, which will replace '"' with &quot; .

Cheers,
Ben