Re: Mangled Data

[email protected] ("Christoph M. Becker")
Newsgroups php.general
Message-ID <[email protected]>
On 18.10.2021 at 18:59, John wrote:

> Solution, forwarded to PHP list:
> ================================
>
> OK, solved this.
>
> The form input MUST be contained in SINGLE quotes; probably to avoid
> being manipulated by the PHP parser.  Double quotes or no quotes don't
> work.
>
> Example:
>
> <input type="hidden" name="trans" id="trans" value='<?php echo
> $data ?>'>
>
> where $data is the incoming JSON data string.
>
> Thanks for your assistance.

Thanks for providing a solution, but I suggest to properly entity-encode
$data anyway, e.g. like

  <input type="hidden" name="trans" id="trans"
value="<?=htmlspecialchars($data)?>">

--
Christoph M. Becker
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.