echo with "

[anakadote]

i have a form where the current values retrieved from the MySQL database are shown in the fields when i enter the page. my problem is when values in the data base contain foot (') or inch (") marks the from fields only display the values up until they occur. how do i make the form fields display entire the values with the foot and inch marks?

here's a section of the code, with the 'dimen' field in question:

[im echoing with double quotes (echo ")] ...

<tr class=\"bodycopy\">
<td><input name=\"title\" type=\"text\" id=\"title\" size=\"15\" maxlength=\"40\" value=\"" . $row['title'] . "\"></td>
<td><input name=\"date\" type=\"text\" id=\"date\" size=\"10\" maxlength=\"15\" value=\"" . $row['date'] . "\"></td>
<td><input name=\"medium\" type=\"text\" id=\"medium\" size=\"15\" maxlength=\"40\" value=\"" . $row['medium'] . "\"></td>
<td><input name=\"dimen\" type=\"text\" id=\"dimen\" size=\"10\" maxlength=\"20\" value=\"" . stripslashes($row['dimen']) . "\"></td>
</tr>

[Drakla]

use [man]htmlspecialchars[/man] on your results and always output between double quotes in your HTML sections.

PS - why are you doing stripslashes on data removed from the database? I've a feeling you've fallen into the "Addslashes when putting it in, stripslashes when getting it out" trap.