[FX.php List] str_replace " in $lookupResult ?

[Andrew Denman]

The default htmlentities() function does not convert single quotes.  Try
using value="..." instead of the single quotes, or the following code if you
will use single quotes around the value property:

$fixedlookuprecipesResult = print_r($lookuprecipesResult);
$fixedlookuprecipesResult = htmlentities($fixedlookuprecipesResult,
ENT_QUOTES);

<input type="hidden" name="recipes" value="<?php
echo($fixedlookuprecipesResult); ?>" />

http://us2.php.net/manual/en/function.htmlentities.php

It should also be noted that the escape character is \, not /.

Andrew Denman

-----Original Message-----
From: fx.php_list-bounces at mail.iviking.org
[mailto:fx.php_list-bounces at mail.iviking.org] On Behalf Of Alex Gates
Sent: Tuesday, May 01, 2007 9:09 AM
To: 'FX.php Discussion List'
Subject: RE: [FX.php List] str_replace " in $lookupResult ?

> When you're putting values into HTML fields, hidden or not, you need
> to use php's html_entities() wrapper to properly encode those
> characters.
> 
> <input type="hidden" name="recipes" value='<?php html_entities(print_r
> ($fixedlookuprecipesResult)); ?>' />
> 


I tried:
<input type="hidden" name="recipes" value='<?php
html_entities(print_r($fixedlookuprecipesResult)); ?>' />
It wasn't successful, so I thought I'd try:

$lookuprecipesResult=$lookuprecipes->FMFindAll();
$fixedlookuprecipesResult = htmlentities($lookuprecipesResult);

But I get:

Warning: htmlentities() expects parameter 1 to be string...

If htmlentities() is used, do I still need to replace ' and " with /' and /"
??



> 
> On Apr 30, 2007, at 10:34 PM, Alex Gates wrote:
> 
> > Greetings everyone-
> > I was hoping someone could help me with my latest head-scratcher.
> >
> > I'm trying to send the results of a find to another page in a
> > hidden field
> > via POST.
> >
> > But, I'm having problems when a double quote is in one of the
> > fields in
> > my result.  My HTML thinks I am ending the value of my hidden field.
> >
> > When I use single quotes around my value like:
> >
> > <input type="hidden" name="recipes" value='<?php
> > print_r($fixedlookuprecipesResult); ?>' />
> >
> > Something like, for example, half 'n half will end my value after
> > the '
> >
> > If I use double quotes around my value like:
> > <input type="hidden" name="recipes" value="<?php
> > print_r($fixedlookuprecipesResult); ?>" />
> >
> > Then something like cut into 1" thick slices will end my value
> > after the "
> >
> > I thought the answer lies with a str_replace, but I can't seem to
> > get it to
> > work even though it is apparently possible to use an array as the
> > subject in
> > a str_replace.
> >
> > With this find:
> >
> > 	$lookuprecipes=new FX($serverIP,$webCompanionPort,'FMPro7');
> > 	$lookuprecipes->SetDBData('myDB.fp7','myLayout', 'all');
> > 	$lookuprecipes->SetDBPassword('xxxxxxx','xxxxx');
> > 	$lookuprecipesResult=$lookuprecipes->FMFindAll();
> >
> > I've tried:
> >
> > 	$fixedlookuprecipesResult = str_replace("' ", "/' ",
> > $lookuprecipesResult);
> >
> > And:
> >
> > 	$fixedlookuprecipesResult = str_replace('" ', '/" ',
> > $lookuprecipesResult);
> >
> > Nothing has worked.
> >
> > I'm assuming this doesn't work because, perhaps, it isn't looking
> > "deep"
> > into the array - but, for example, searching $lookuprecipesResult
> > ['Recipe
> > Ingredients'] gives me an undefined index error.
> >
> >
> > Am I missing something obvious here?
> > Any insight would be greatly appreciated!
> >
> > Thanks!
> >
> > Alex
> >
> > _______________________________________________
> > FX.php_List mailing list
> > FX.php_List at mail.iviking.org
> > http://www.iviking.org/mailman/listinfo/fx.php_list
> 
> 
> Derrick Fogle
> derrick at fogles.net
> 
> 
> 
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list


_______________________________________________
FX.php_List mailing list
FX.php_List at mail.iviking.org
http://www.iviking.org/mailman/listinfo/fx.php_list