parka Posted June 5, 2008 Share Posted June 5, 2008 Is there any difference between storing pure HTML and encoded HTML into databases? E.g. Storing <script> vs <script> They will be properly sanitized before inserting into the database. When printing on a webpage, the <script> will be properly encoded to <script>. And of course, the <script> doesn't need additional encoding. Quote Link to comment Share on other sites More sharing options...
luca200 Posted June 5, 2008 Share Posted June 5, 2008 I prefer to encode it when I show it on a web page. What you store in a db could have some other use, some day..... Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.