|
So as long as I'm using the addslashes, htmlspecialchars, and the sql escape string, then I'm safe to turn off magic_quotes?
I'm looking over my page, still can't find where it's different than the example posted, but it's got to be there somewhere
edit: Ok. It displays the preview text, but something has to be going wrong when it creates that hidden variable, because it does not send it through there.
edit2: and duh. I wasn't doing the htmlspecialchars before I put it into the hidden field, that's why it wasn't working. Well, now I know more. Thanks to you guys for helping me find out what was up.
|