http://phpesp.sourceforge.net/demo/public/survey.php?
name=TESTING1234577
In the essay box type something which contains a bunch
of quotes and double quotes (or pick a french line, or
just copy the example above).
Do NOT check on or the combo boxes (so you forgot to
fill out a required question), press submit. The program
still knows the data you entered but it has escaped it,
now if that was a big text you could amuse yourself
deleting all the backslashes. On the otherhand a user
could also not see it, press ok and enter the quoted text
into the database which isn't a good solution either.
problem exists on 1.6.1 running at home and at the
online demo.
Logged In: NO
using html_entities or urldecode might solve this problem.
Logged In: YES
user_id=14116
Fixed in CVS.