Special character output as value

jc94062

I have some text I want to print out as a value for an input field, I can do this just fine for textareas whatever the text

for example, but if I try to do it as a value in an input box

<input type='text' ... value='".$var."'> then it stops after showing any special character, such as '

"I'd like to" becomes "I" and then nothing else appears

I tried the normal addslashes\htmlspecialchars to get it to work but the same thing happens every time, anyone know of a way to get around with without using textareas? The system is a polling system, and I really don't want to give admins unlimited length when typing questions and answers to then have to error check the length on submission or (even worse), use the dreaded Javascript!

Thanks for any help

Mordecai

Use str_replace() to replace each " with " or something similar.

jc94062

I've give that a shot, though having don"t would look a little odd.

I can't test it as my own net connection is dead (and has been for a while) and I haven't got anything on this machine to even view code let alone download it.

Weedpacket

[man]htmlspecialchars[/man]

jc94062

I'd already tried addslashes\htmlspecialchars without success.

str_replace does kinda of work, but like I suspected gives the I"d stuff.

${"pollAnswer".$i} = str_replace("'",'"',${"pollAnswer".$i});

$form .= "<tr><td class='whitehead2'>Answer #".$i."</td><td>&nbsp;<input type='text' name='answer".$i."' value='".${"pollAnswer".$i}."' size='30' maxlength='40'></td></tr>";

I used that idea to get working code thanks, but its a tad ugly

$form .= <<<EOD
?>
<tr><td class='whitehead2'>Answer #$i</td><td>&nbsp;<input type='text' name='answer$i' value="${'pollAnswer'.$i}" size='30' maxlength='40'></td></tr>
<?
EOD;

At least it works I guess 🙂

jc94062

$form .= '<tr><td class="whitehead2">Answer 
#'.$i.'</td><td>&nbsp;<input type="text" name="answer".$i."" value="'.${"pollAnswer".$i}.'" size="30" maxlength="40"></td></tr>';

works just as well as it a lot neater of course 🙂

Weedpacket

<html><body>
<?php
$string = "I'd like to [censored]";
?>
<input type="text" value="<?php echo htmlspecialchars($string)?>">
<input type='text' value='<?php echo htmlspecialchars($string,ENT_QUOTES)?>'>
<?php
echo "<input type='text' value='".htmlspecialchars($string,ENT_QUOTES)."'>";
echo '<input type="text" value="'.htmlspecialchars($string).'">';
?>

</body></html>

No problem here...