[RESOLVED] to quote or not to quote

auddog

In my database I have a dimensions field that hold our units dimsensions. Usually the value = 1.72"W x 18"H x 3"D. Everything goes into my database alright. Even when I retrieve the information it's correct, but when I try and run my modification form and place the results inside an input box I can not get past the first set of quotes. Here is my input line:

          <input type="text" name="dimensions" size=50 maxlength=75 value="<?php echo $dimensions1; ?>">

I have tried everything to get this to show the whole results. Can someone tell me what the correct way is to show all of the result including the quotes. Thanks for any help you can provide.

Piranha

I can see two ways to solve it:

<input type='text' name='dimensions' size='50' maxlength='75' value='<?php echo $dimensions1; ?>' />
// will output
<input type='text' name='dimensions' size='50' maxlength='75' value='1.72"W x 18"H x 3"D'>

The other way is to change the " sign to ". I think that is done with [man]htmlspecialchars[/man], but I'm not sure. Anyway the output will be the following:

<input type="text" name="dimensions" size="50" maxlength="75" value="1.72&quot;W x 18&quot;H x 3&quot;D">

And that works as well.

auddog

I chose to use the first one and that worked. I'm almost certain that I had already tried that, but now it works. Thanks for the fast response and help.

Piranha

No problem m8. Just remember that if you use single quotes then you get the same problem if you have single quotes in the text.

bradgrafelman

Piranha wrote:
Just remember that if you use single quotes then you get the same problem if you have single quotes in the text.

Which is exactly why you should just run the data through [man]htmlspecialchars/man and not worry about what quotes you're using.

NogDog

<?php // the htmlspecialchars method ?>
<input type="text" name="dimensions" size=50 maxlength=75 value="<?php echo htmlspecialchars($dimensions1, ENT_QUOTES); ?>">