getting SQL database infor to a dynamically created text box

Question

Hi I have a text box dynamically created to get a value from a database. The specific line in the code is as follows and it works fine;

<input name='routename'  class='colr' type='text' id='routename' size='20' maxlength='40' value=".$row['route']."></td>

How ever my database has a value 'colombo/ srilanka' and when the result is loaded to the text box it captured only 'colombo/' and 'srilanka' is missing. In other words text after the space is not loaded to the textbox. Can someone help me with a workaround?

Thanks for looking!

xdazz · Accepted Answer · 2012-10-04 03:46:52Z

1

You missed the quotes of the value, and don't forget using htmlspecialcharor htmlentities.

"<input name='routename'  class='colr' type='text' id='routename' size='20' maxlength='40' value='".htmlspecialchar($row['route'])."'></td>"

answered Oct 4, 2012 at 3:46

xdazz

161k38 gold badges255 silver badges278 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Amw Amw Over a year ago

Bingo! :D it worked! also xdazz would you mind explaining the difference circumstances htmlspecialchar or htmlentities should use or both deliveres the same protection?

xdazz Over a year ago

You could use either of them. The difference is what gets encoded, the special char or the entity.

Stegrex · Accepted Answer · 2012-10-04 03:45:53Z

1

Try htmlentities():

echo "<input name='routename'  class='colr' type='text' id='routename' size='20' maxlength='40' value='".htmlentities($row['route'])."' /></td>";

When you echo anything from PHP into HTML, you should always wrap the string with htmlentities to make sure the outputted string is safe for HTML to display (without inadvertently writing markup to the page instead).

answered Oct 4, 2012 at 3:45

Stegrex

4,0441 gold badge19 silver badges19 bronze badges

3 Comments

Amw Amw Over a year ago

Nope Stegrex! still I dont get the rest with htmlentities()

Amw Amw Over a year ago

As xdazz mentioned yes quotes are missing and your suggestions worked! Thank you!

Stegrex Over a year ago

@AmwAmw Try doing echo $row['route']; and check the source of the page in a browser (not just what you see on the page, basically hit Ctrl+U). Also not that you need the single quotes to wrap around the value right after "value=" as xdazz noted.

Collectives™ on Stack Overflow

getting SQL database infor to a dynamically created text box

2 Answers 2

2 Comments

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related