Re: [PHP] strlen ?

MOTS:  never take any input on faith.


Jim Giner wrote:
> On 7/5/2013 3:02 PM, Stephen wrote:
>> On 13-07-05 02:50 PM, Jim Giner wrote:
>>>
>>> Now the question is - how the heck did I put that in there? Certainly
>>> not intentionally.  The data is captured from a d/e screen I wrote and
>>> it simply grabs the post value and inserts a new record with that
>>> value along with some other values.  And I don't see anything
>>> concatenating a LF to my string.
>>>
>> Is this a browser being used for input? Never assume what a browser will
>> do.
>>
>> It is good practice to validate and condition data before inserting into
>> a database.
>>
>> Consider trimming the data before doing the INSERT.
>>
> I do validate my data by quoting it but I never expected to have to do 
> a trim to remove a LF.  Especially on an iphone for input, since it's 
> not easy to enter a LF.
>