aximbigfan Posted March 7, 2008 Share Posted March 7, 2008 Hi, I know this is probably pretty easy stuff, but I am terrible coding JS. Basically, I have a text box. nothing fancy, <input type='text' yadda, yadda> I want to make sure that the user can't enter bad chars in this text box. I haven't figured out the extent of the the bad chars, but I already know that " ' are baaaddd. I do know that you generally want to validate on the server side, but I figure if the user is going to try and use some other way of posting, then the user probably wants to experiment and stuff. Which is fine, because this is a webapp (log viewer) and it is password protected anyway. I'll implement server side validation later. For now, I just want to do it with Js. What I would like it to do if the user enters a certain char in, is juts make a little alert() message saying that that char is invalid. Thanks, chris Link to comment https://forums.phpfreaks.com/topic/94917-block-user-from-entering-or-and-other-bad-chars/ Share on other sites More sharing options...
Daniel0 Posted March 7, 2008 Share Posted March 7, 2008 Don't block it, but when outputting it use htmlentities() and make sure to escape the quotes before using the values in a query. Link to comment https://forums.phpfreaks.com/topic/94917-block-user-from-entering-or-and-other-bad-chars/#findComment-486316 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.