but in 99% of all cases:
dont sanitize, dont strip tags, dont do anything on save
simple use h() to remove html tags in the view where you output the
database content
echo h($user['User']['username']); etc
On 26 Aug., 23:47, Ryan Schmidt <google-2...@ryandesign.com> wrote:
> On Aug 26, 2011, at 15:39, Prabha vathi wrote:
>
> > It seems i read some wrong tutorial. :(
> > I have added few hundred of data in database. Is there anyway to fix it?
>
> Sure, but it's outside the scope of what CakePHP does. I'd dump the data to a text file, search for all occurrences of the regular expression &[^;]+; and then fix those database entries by hand. If there are many, I might write a one-time script or set of UPDATE statements to fix things. Of course I'd first fix the code and deploy it, so that no new bad entries get into the database.
>
> > When i send the data to database, how do i strip the html tags? Should i use strip_tags?
>
> I'm not certain what the recommended way to do that in CakePHP is.
--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php
No comments:
Post a Comment