Welcome! » Log In » Create A New Profile

Stripping URL

Posted by RDC 
RDC
Stripping URL
February 05, 2013 08:56PM

I'm using CKEditor on one of my sites. I just installed HTMLPurifier to assist in filtering any bad data. If I enter a URL via CKEditor, ie; yahoo.com, it is getting stripped out and replaced with %5C.

I'm guessing there must be something I'm doing wrong?

I have the POST data getting filtered like this: $cleaned = $purifier->purify($_POST['rawdata']);

Thanks!

Re: Stripping URL
February 05, 2013 09:19PM

Turn off magic quotes.

RDC
Re: Stripping URL
February 06, 2013 05:49PM

Thanks for the quick reply! I have turned off magic_quotes via php.ini. But, now my code is not escaping quotes. Is there setting in HTMLPurifier that will excape the quotes?

Thanks!

Re: Stripping URL
February 06, 2013 07:50PM

You should switch to a real database library which does escaping for you...

Sorry, you do not have permission to post/reply in this forum.