Submitting Quotes and HTML

[rgraves]

Hi,

I want to be able to submit single and double quotes in a form as well as HTML. This is all fine and dandy, however I have an edit form that grabs that existing data and puts it into input boxes. This is where it becomes tricky.

Basically, when I try to display the data in the input boxes, it messes up because I have something like this:

<input type='text' name='blah' value='this is my 'test' "value" that i am <b>using<b>'>

Obviously it causes problems with quotes within quotes. I know I can use htmlentities() to convert them to &quot but then this will cause problems because if I have HTML, it will convert the HTML code to &lt and &gt as well as any quotes used in the HTML.

Does anyone have a function that can solve both my problems? I'm assuming this forum has the fix since one can submit both quotes and html and still have everything work fine.

Rob

[sidney]

prepare the value with htmlspecialchars()

$value="'this is my 'test' \"value\" that i am <b>using<b>'";
echo'<input type="text" name="blah" value="'.htmlspecialchars($value).'">';