Topic: Parser : '
Single straight quote (') is transformed into the html entity '
Is that really necessary? It's slightly heavier, and source code unfriendly to read 
- Jérémie
- Member
- Offline
Re: Parser : '
forum_htmlencode encodes single quotes as well as double quotes. It is simply a security measure: without it, someone could write something like
<input type='hidden' name='test' foo='<?php echo forum_htmlencode($_POST['test']) ?>' />or
<a href="#" onclick="document.location='<?php echo forum_htmlencode($_POST['test']) ?>'">Test</a>and the code would be vulnerable to an XSS.
- Jérémie
- Member
- Offline
Re: Parser : '
Woki, thanks for the info.