You need to HTML encode you data.
One way to do it is to change:
<TMPL_VAR name="test">
to
<TMPL_VAR escape=html name="test">
-Todd
On Thu, 19 Dec 2002, paul POULAIN wrote:
> Hi,
> it's my 1st post here. I work on the koha project (www.koha.org) and
> release manager, and we face a problem nobody can solve in our devel
> list :-(((
>
> In the template we have :
> <input type="text" name="test" value="<TMPL_VAR name="test">">
>
> and we "replace it with the $template->param(test => $test)
>
> Our problem is that when $test='here is "daddy"';
> the result is :
> <input type="text" name="test" value="here is "daddy"">
> which is bad html, and result in a field containing "here is" ("daddy"
> is lost)
> If we replace " by ' in the template, we face the same problem with
> "it's me again".
>
> So, how could we solve this ?
>
>
-------------------------------------------------------
This SF.NET email is sponsored by: Geek Gift Procrastinating?
Get the perfect geek gift now! Before the Holidays pass you by.
T H I N K G E E K . C O M http://www.thinkgeek.com/sf/
_______________________________________________
Html-template-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/html-template-users
