davidsakh

prompt and dead-on. It works. I apologize for my stupidity. Thanks.

I'm trying to break my database. I was able to successfully insert: blah? "lol" 'wee'' into the database, so I think I'm cleaning the strings properly, but when I print it out for the user inside of an input field, 'wee' isn't displayed, because the slashes aren't added. in the source, i see: value='blah? "lol" 'wee'' /> so, I addslashes(), and this works, but the user sees slashes around "lol" when I don't want her to. Any help would be greatly appreciated. Security is not my strong point. :-\

[quote]why[/quote] My username on the site is a series of random letters and numbers. I'm using the php mail command. I want the user to recieve an email like: From the MySite Staff not From akd334k3k

I'm hosting with godaddy and have no access to php.ini. I need to make an email SEEM like it's coming from somewhere it's not (or just change it to 'from MyCompany') Is there any way i can set sendmail_from without access to php.ini?