Saving HTML to database with Symfony-2.0 form component

Question

I am trying to save HTML content with the Symfony2 form system but I am facing issues with escaping.

My addPost action looks like this

$em = $this->getDoctrine()->getEntityManager();

$post = new Post();
$postForm = $this->createForm(new PostFormType(), $post);

if ($request->getMethod() == 'POST') {
   $postForm->bindRequest($request);

   if($postForm->isValid()){
      $em->persist($post);
      $em->flush();
   }
}

The problem is that the post form has a content textarea that allows the user to enter html. When the form is submitted with html like <a href="#">test</a> the content gets saved to the database as <a href=\"#\">test</a>. And then on each subsequent save the backslashes escape themselves again and again...

What is the proper way to store HTML with the Symfony2 form component?

Mike · Accepted Answer · 2012-08-10 14:16:40Z

1

You should remove the backslashes from the string before sending it to the user to edit. You should be able to get the content from the $post object and then strip its slashes and set it back to the post content like so.

$post = new Post();
$post->setContent(stripslashes($post->getContent()));
$postForm = $this->createForm(new PostFormType(), $post);

Now when the form renders it will not have the escape characters.

However, I have found that if you return a response to the same page you will still see the backslashes. To avoid this you can return a RedirectResponse like this

if($postForm->isValid()){
   $em->flush();
   return new RedirectResponse('route', array('postId' => $postId)));
}

answered Aug 10, 2012 at 14:16

Mike

12.9k18 gold badges67 silver badges87 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

NightRaven · Accepted Answer · 2012-08-09 18:43:52Z

0

Those slashes are placed there so that the mysql engine doesn't confuse those quotes with sql syntax. I suggest you use a rejex to get rid of all the slashes when you retrieve the field from the database, but before you post it to the client. let me see if I can find the rejex for you, maybe someone will beat me to it :)

answered Aug 9, 2012 at 18:43

NightRaven

4013 silver badges17 bronze badges

1 Comment

NightRaven Over a year ago

even better than the rejex, try using php's trim command --- string trim ( string $str [, string $charlist ] ) just make that second argument this: "\\" , Like this: trim($html, "\\");

Collectives™ on Stack Overflow

Saving HTML to database with Symfony-2.0 form component

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related