CptAwesome — Sun, 16 Jan 2005 10:13:32 +0000

in truth, you might as well convert everything aside from letters, so you don't forget what you did/didn't convert, and then if anything f***s up, just make it not convert anymore.

Renegade — Sun, 16 Jan 2005 03:48:12 +0000

RTM - htmlspecialchars()

artsapimp — Sun, 16 Jan 2005 01:07:27 +0000

Yes it is going into a database. For development it is being submitted to MS Access. Will be converted to MS SQL once uploaded to production.

I haven't heard of that. What does htmlspecialchars() do? Simply convert all special characters to ansi?

If I chose to convert the entire symbol range is there an easy way to do that? My initial thought process would be to create a list of all characters, place them into an array, and loop through that. Is there an easier way?

Busy — Sat, 15 Jan 2005 21:42:21 +0000

depends if it's going into a database etc, things like " ( ) % should be converted as well, the ( )'s can be used from rss attacks or something. but you could convert the entire symbol range to be extra safe. or if ASP uses a HTML tag replace thing, like PHP's htmlspecialchars() or htmlentities()