Menu

#1 html cleanup in submit news module

php developpers
open
nobody
7
2007-03-07
2007-03-07
No

When an admin submits a news using the admin interface instead of the public submit news interface, a ' or " in the title triggers a security feature that blocks that submission.

The admin module should be modified as the public part to store htmlentities parsed strings in the db and decode html entities on display.

This is much safer as no quotes or special characters are then be stored in the DB.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB