Email and double quotes problem

[slash5]

Hi,

I've written a simple script that allows the user to type a message into a form field and then send that message to my email address.

I've used stripSlashes on the message, which works great for single quotes. However, when the message contains a double quotation mark I get an email that shows everything up until the first double quotation mark was typed and then nothing appears.

e.g. If the user types this :

Blah blah 'blah' blah "blah" this is my message.

I only get sent this:

Blah blah 'blah' blah

Is there a way of preventing this from happening?

Thanks
Chris

[devinemke]

if you are displaying the message back to the browser then you should run it thru [man]htmlspecialchars[/man].

[slash5]

Thanks,

I thought it was going to work, but I don't think I'm doing it right.

Does htmlspecialchars() or htmlentities() work on a variable of the message?

As in:

global $message;

$message = stripslashes($message);
$new_message = htmlspecialchars($message);

mail($mailto, $subject, $new_message....

Hope this makes sense,

Chris

[devinemke]

you don't need (or want) to run your data thru htmlspecialchars() to simply feed to mail(). you do need to if you are displaying it in the browser. post your code.