Working with special characters

[Anon]

I'm running into a strange problem -

In a scenario when I'm selecting data from the db to be used in an <input>, such as:

<input type='text' name='Data' value='$data'>

If the $data has single or double quotes, the string gets cut off because the browser reads it as the closing quotes for the value. If I remove the quotes, then anything separated by a space is lost.

I tried various incarnations of htmlspecialchars, addslashes, etc., but none of them seem equipped to handle a text input with single and double quotes, such as if I was inputting a height of 6'1".

Any ideas how to handle this?

Thanks,

Steve

[Anon]

Never mind - found the answer.

For anyone who may be searching for a similar solution:

http://www.php.net/manual/en/function.htmlentities.php

[anarino]

Well, how I handle this is to always use double quotes around the value attribute and simply str_replace all the double quotes in the string to " (ampersand escaped entity). In the code fragment above you\'d have to use \\" (backwards slash escaped) around the value attribute.

Good luck,
doug