can not show & sign

[derksj]

I use this code to show $bedrijfsonderdeel

<tr>
    <td width=\"115\" nowrap bgcolor=\"#C0C0C0\"><strong>Bedrijfsonderdeel</strong></td>
    <td width=\"130\" nowrap>$bedrijfsonderdeel</td>
  </tr>

but when a "&" sign appears in $bedrijfsonderdeel then php show %026
how can i change this

i tryed

<tr>
    <td width=\"115\" nowrap bgcolor=\"#C0C0C0\"><strong>Bedrijfsonderdeel</strong></td>
    <td width=\"130\" nowrap><?php echo urlencode($bedrijfsonderdeel);?></td>
  </tr>

but then i dont see a echo of $bedrijfsonderdeel
what goes wrong

[Weedpacket]

Could you post some more code than this, please? It's impossible to see what's going on from what you've given (unless perhaps $bedrijfsonderdeel contains "%026" and not "&" and you need to urldecode() it before displaying. Actually, you'd need to urldecode() it and then htmlspecialchars() to convert "&" into "&").

[derksj]

this is the code

<?php

include("includes/login.php");

@extract($_POST);
$name = stripslashes($name);
$subject = stripslashes($subject);
$headers .= "From: $email \n";  

$headers .= "Cc: $email \n";  

$headers .= "MIME-Version: 1.0\r\n";  

$headers .= "Content-Type: text/html"; 


$messagefm = stripslashes
("
<p align=\"center\"><font size=\"4\">$subject</font></p>
<center><table border=\"0\" width=\"23%\">
  <tr>
    <td width=\"115\" nowrap bgcolor=\"#C0C0C0\"><strong>Bedrijfsonderdeel</strong></td>
    <td width=\"130\" nowrap>$bedrijfsonderdeel</td>
  </tr>
</table></center>

");

mail('[e-mail]',$subject,$messagefm,"$headers");
header("location:bedankt.php"); 

?>

[khendar]

So....where is $bedrijfsonderdeel coming from ???

[derksj]

from a form wich gets his value "K&I" from a database

<TD nowrap>
		<?php echo $row["expAbbr"]; ?>
		<INPUT type="hidden"  name=bedrijfsonderdeel value=<?php echo urlencode($row["expAbbr"]);?>>
	</TD>

[khendar]

We'll there's our problem. You are urlencoding the value of $row["expAbbr"] - then passing it to the form. You'll need to urldecode($bedrijfsonderdeel) so it will replace the %26 with &, just as WP said.

[derksj]

do i have to do this in the form or in the form handler?

[khendar]

In the handler...although there is really no need to encode it in the first place as you are passing the variable throgh POST.

[derksj]

ok thanx guys

[Weedpacket]

khendar wrote:

although there is really no need to encode it in the first place as you are passing the variable throgh POST.

Not quite true: since it's being inserted into HTML you will be wanting to pass it through [man]htmlspecialchars[/man] to properly escape the &.

[khendar]

Oh yeh...htmlspecialchars yes - urlencode no. 😃