php page off of database

[juschillinnow]

I have a form where the user can input a code or html or whatever.

When the user submits the form, I've been "unhtmlentities" before saving it to the db.

Then I echo the field with php.

If I just have html in there, it works fine.

But if I put the code:

<? include("index.php"); ?>

and unhtmlentities and then store it in the database, then call the row.....

I get nothing.

What do I need to do, to run php off of a database?

Thanks.

[juschillinnow]

basically what I'm trying to do is:

<?
echo "<? include(\"store.php\"); ?>";
?>

how to do?

and please don't tell me to take off the echo! I know that, but I can't because somehow I have to echo out the "script" off the database. What function am I looking for?

[juschillinnow]

another example is:

I store:

<form action = "<?$PHP_SELF?>" method="post">

onto the database. and I want to echo it so it reads:

<form action="./store.php" method="post">

but when the form is submitted it goes to:

http://mysite.com/<?$PHP_SELF?>

[ScubaKing22]

Maybe you could use htmlspecialchars() and a combination of addslashes/stripslashes.

[tekky]

try this maybe...

<form action = "<? echo $PHP_SELF; ?>" method="post"> 

even though you are escaping to put PHP inline, it STILL requires all php syntaxes up to and including display commands AND ending semi-colons 😉

[superwormy]

I think what might help is eval()
www.php.net/eval

<?php

$code_and_html = " this is html <?php print (" and this is PHP "); ?> and more html";

eval (" ?> " . $code_and_html . " <?php ");

?>

[juschillinnow]

thanks. eval was right. I figured it out when phpbuilder was having all those db problems last night.

Thanks