Re: privately coded message board [php & mysql] [message #246801 is a reply to message #246797] |
Sat, 24 February 2007 17:20 ![Go to previous message Go to previous message](/theme/Renegade_Forums/images/up.png) ![Go to next message Go to previous message](/theme/Renegade_Forums/images/down.png) |
lookitzhiep
Messages: 12 Registered: May 2006
Karma:
|
Recruit |
|
|
genetix wrote on Sat, 24 February 2007 18:11 | If you are at the stage in PHP developement where you are relying on addslashes then I wouldn't recommend moving onto a large project such as a forum.
You will want to convert all characters to entities for sure. If you don't do that you will run into trouble. This also makes it so that there aren't any restrictions needed as far as quotes goes.
I would recommend hanging out here for a while first:
http://www.devnetwork.net
|
Thanks for the link, I'm really just a beginner in PHP. I began to learn it as I had interest in coding one myself. I bought a book recently and its just getting me on my feet with the basics so I wouldn't know of such yet.
Entities would be when a character such as "<" appears as "<" right? That seems much better than having to addslashes() and stripslashes() everything! Thanks! Though if I apply this method, would I still need to filter URLs out?
[Updated on: Sat, 24 February 2007 17:20] Report message to a moderator
|
|
|