Just FYI, I tested it out a number of times and 5" updated about 5 times
still produced 5"  (viewing source it was 5")

I actually tested > & # too ... and it seemed to work just fine as well --
Interesting.

I guess back to my original question, should I htmleditformat all my
textareas and text fields that could possibly have these types of
characters?

Paul Giesenhagen
QuillDesign

----- Original Message -----
From: "S. Isaac Dealey" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, July 17, 2002 4:51 PM
Subject: Re: HtmlEditFormat()


> > Right now, when I type in 5" and save it to the database, it displays as
> > 5" and when I update that field in a form, it comes out of the database
> > as 5" too ...  I guess I am confused when you mentioned that the
updating
> > would be the &quot; or other ugly characters...
>
> I didn't remember off-hand if htmleditformat() included double-quotes as
one
> of the fields it escapes, but I know it escapes greater than or less than
> symbols, so... say for instance, a user inputs
>
> Hello -> there
>
> into a text field, then goes back and updates that data, they'll see
>
> Hello -&gt; there
>
> in the form field if you've htmleditformatted the data going into the
> database...
>
> Or they'll actually see -> but when you view source you will see -&gt; in
> the form... So they'll save that and then the next time they go to edit it
> they _will_ see -&gt; or worse yet -&amp;gt&#xx; in the field...
>
> I have a sneaky suspicion ( though I can't test it right now ) that
> htmleditformat() doesn't check for existing html special characters, so if
> you use htmleditformat(htmleditformat(myvar)) it will progressively make
the
> string longer and longer as it continues to htmleditformat the & and ;
> characters in all the html special characters.
>
> Test it out -- save something from a form with 5", then edit that data
gain
> in the same form and view the source -- if the " is in the field visible
to
> the user, I'll bet you anything that the data is actually &quot; and then
> save it again and you'll actually see &quot; in the field...
>
> hth
>
> Isaac Dealey
>
> www.turnkey.to
> 954-776-0046
> 
______________________________________________________________________
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to