RE: [PHP] $_GET and multiple spaces.

-----Original Message-----
From: Richard Lynch [mailto:ceo@xxxxxxxxx]
Sent: Monday, January 14, 2008 2:11 PM
To: Jochem Maas
Cc: clive; Churchill, Craig; php-general@xxxxxxxxxxxxx
Subject: Re: [PHP] $_GET and multiple spaces.

On Mon, January 14, 2008 3:17 am, Jochem Maas wrote:
I think actually the whole url should be urlencoded as a matter of
course, not
100% sure about this (and it's way to early on a monday to bother
checking up ;-) ...
maybe someone else can chime in?

Actually, after you urlencode() the values, you should htmlentities
the whole URL, as it is being passed to HTML as a value to be output
to HTML.

The whole URL should *NOT* be URL-encoded, however.

--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?

Like this?

$url =
htmlspecialchars('whatever.php?'.urlencode($name).'='.urlencode($value));

Regards,

Rob
.

Relevant Pages

  • Re: How do we get there from here?
    ... > then sub the whole of that generated markup into the template? ... layed out on the fly, a simple IMG tag, or even an entire HTML document. ... PHP scripting provides 10 times the features of both of these ... idea as tokens can eliminate a huge amount of maintance, ...
    (comp.databases.pick)
  • Re: query string passing woes........ help... please....
    ... |> | offer any help other than saying that my validation could be FAR more ... I'm a total newbie at php. ... The easiest way for you would be to make the html form called form.php ... $_SESSION array using the same names. ...
    (alt.php)
  • Re: HELP - Cant change Include Path
    ... Here is my php.ini path for the php.ini in both php and sql dirs: ... which did work on the remote linux server and sent me some mail ... Although my gmail acct picked the mail up as ... an attachment instead of as html - but gmail is really wierd about ...
    (comp.lang.php)
  • Re: How do we get there from here?
    ... server-side-scripted html. ... This is a simple example with very little php scripting. ... means that the version of the php pre-processor on your web server must ... >>> The browser never sees anything not sent to it by the script. ...
    (comp.databases.pick)
  • Re: PHP-Yes, HTML-No --- Why?
    ... Because the files, when downloaded, are called .php and have absolutely no php in them:) ... But the extension doesn't match the contents of the file. ... Surely a dynamic web server should appear exactly the same as a static one - all files that contain HTML when viewed should be called .html. ...
    (comp.lang.php)