Re: Regex for accepting text and HTML *entities*

2004-09-09 Thread Gunnar Hjalmarsson
Chris Welch wrote: I thought the deal with writing to external files and such (remember some things will be written to flat files as well as DBM files) is that it is a security issue if no checking is done for malicious script - I think you are mixing up things. Data is just data. If 1) the data

Re: Regex for accepting text and HTML *entities*

2004-09-08 Thread Chris Welch
On Wed, 08 Sep 2004 00:43:44 +0200, Gunnar Hjalmarsson <[EMAIL PROTECTED]> wrote: > Chris Welch wrote: > > I have a form and someone submits weird stuff that probably > > shouldn't be in there (but you never know.) This has to be writted > > to a DBM database/ filehandle. > > > > The weird stuff n

Re: Regex for accepting text and HTML *entities*

2004-09-07 Thread Gunnar Hjalmarsson
Chris Welch wrote: Right the deal is thus - if I am getting the wrong end of the stick, feel free to beat me over the head with said stick. Okay, I'll see what I can do. :) I have a form and someone submits weird stuff that probably shouldn't be in there (but you never know.) This has to be writte

Re: Regex for accepting text and HTML *entities*

2004-09-07 Thread Chris Welch
On Tue, 07 Sep 2004 22:43:10 +0200, Gunnar Hjalmarsson <[EMAIL PROTECTED]> wrote: > [ Please type your reply *below* the quoted part of the message you > are replying to. ] > > Chris Welch wrote: > > Gunnar Hjalmarsson wrote: > >> Chris Welch wrote: > >>> I have a dilemma, I am processing CGI form

Re: Regex for accepting text and HTML *entities*

2004-09-07 Thread Gunnar Hjalmarsson
[ Please type your reply *below* the quoted part of the message you are replying to. ] Chris Welch wrote: Gunnar Hjalmarsson wrote: Chris Welch wrote: I have a dilemma, I am processing CGI forms and I need to come up with a regex that will accept HTML entities (i.e., " or {), Your description makes

Re: Regex for accepting text and HTML *entities*

2004-09-07 Thread Chris Welch
Basically I am going to turn some funny characters into HTML entities using the aforementioned HTML::Entities so I can display them in a HTML page. I therefore need to accept them, but also the other chars. I don't want to allow people posting dodgy stuff that is going to be damaging... As far as

Re: Regex for accepting text and HTML *entities*

2004-09-07 Thread Gunnar Hjalmarsson
Chris Welch wrote: I have a dilemma, I am processing CGI forms and I need to come up with a regex that will accept HTML entities (i.e., " or {), Your description makes me fear that you are somewhat off track. *Why* would you need such a regex? If you explain more about the context, it would be easi

RE: Regex for accepting text and HTML *entities*

2004-09-07 Thread Bob Showalter
Chris Welch wrote: > Hi, > > I have a dilemma, I am processing CGI forms and I need to come up with > a regex that will accept HTML entities Have a look at the HTML::Entities module source code for regexes. If you're just trying to decode entities, use this module instead of rolling your own. ht

Regex for accepting text and HTML *entities*

2004-09-07 Thread Chris Welch
Hi, I have a dilemma, I am processing CGI forms and I need to come up with a regex that will accept HTML entities (i.e., " or {), white space, some other chars and text... The regex I've come up with is flawed: m/^&#?\w{2,4};|[EMAIL PROTECTED],\(\)\/\[\]:;\?!]+$/g; This will match and ampersand