text box + single quote + space

[far]

while($row = mysql_fetch_object($sql_query)){
	$menu_title = $row->menu_title;
}

//First echo
echo $menu_title;

//Second echo
echo"<tr>
  <td ><input type='text' size='30' name='title' value=".$menu_title."></td>
</tr>";

//Thrid echo
echo"<tr>
  <td ><input type='text' size='30' name='title' value='$menu_title'></td>
</tr>";

based on the above code the:

1) first echo does the job correctly.

2) On the second echo if $menu_title contains a space between the words then only the first word would be displayed, why?

3) On the third echo if $menu_title contains a single quote then what ever comes after the single quote does not show in the text box, i tried using echo method number 2 but i ended up getting the first word only?

how can i solve this problem?

[NogDog]

In HTML, an attribute value which has spaces must be quoted. (In XHTML, all attribute values must always be quoted regardless of spaces, though browsers may let you get away without the quotes if there are no spaces in the value.)

My recommended solution:

echo "<tr><td ><input type='text' size='30' name='title' value='" .
htmlentities($menu_title, ENT_QUOTES) . "'></td></tr>";

// ...or...
printf(
   "<tr><td><input type='text' size='30' name='title' value='%s'></td></tr>\n",
   htmlentities($menu_title, ENT_QUOTES)
);