CptAwesome — Sat, 06 May 2006 05:10:53 +0000

string = 'input "string" yeah';
string = string.replace(/["']/,'');

That will replace all " and ' with nothing (ie killing them) if you run it as an onkeypress or something to that effect on a textarea/input box, that would eliminate the problem.

teammatt3 — Sat, 06 May 2006 05:06:30 +0000

Well, when someone creates a new listing on the site, the title of the listing is also the pagetitle. If the pagetitle has a ' or " in it, I get an error. I am going to forget working on that PHP and I am now focusing on getting a javascript that will prevent someone from using ' or " in the pagetitle. Thanks for all the help CptAwesome and Renegade.

CptAwesome — Sat, 06 May 2006 04:59:23 +0000

What are you trying to do exactly?

teammatt3 — Sat, 06 May 2006 01:30:06 +0000

It is by the forum's template engine, which does not execute the PHP. So what you're saying is I have to find the source of where the {PAGETITLE} is being built in PHP and go from there?

Is there a JavaScript that can prevent people from typing ' or ", or is that impossible with JavaScript?

CptAwesome — Fri, 05 May 2006 23:01:49 +0000

How is wrapper.tpl being brought into the script? Is it by the forum's template engine which does not execute php? I went to the link you provided and the php code isn't being executed, the problem isn't the code, it's how you are trying to utilize it. Since you're pulling it from a .tpl file, it's being dumped in AFTER the php has been executed, or it's being dumped in as A STRING not as php executable code.

teammatt3 — Fri, 05 May 2006 22:13:31 +0000

That doesn't work either Renegade. I think the problem lies here

<?php
 
// if string length is zero, or does not exist
if(strlen($bg) == "0") { $bg = "{PAGETITLE}";}
?>

because if {PAGETITLE} has a " in it that messes the PHP up, because there are already quote there. I could change it to ' instead of " but then if the pagetitle had a ' in it, the same problem would occur.

Capt. I am not sure what you mean, you can take a look at the whole code here http://tidget.com/templates/default/wrapper.tpl

CptAwesome — Fri, 05 May 2006 14:38:46 +0000

Is this a header you are including or a template that is being brought in by the forum. If it is not being included, the code will not be executed.

Renegade — Fri, 05 May 2006 04:37:07 +0000

Is there any reason why you would have

<?php
 echo addslashes(\"$bg\"); 
?>

Try using just

<?php
 echo addslashes($bg); 
?>

and see if that helps.