CakePHP Echoing HTML from Database

Question

I've been trying to echo html already created by the user (Using TinyMCE) into another page in the application. The problem I keep running into is the tags are echoed into their HTML equivalents (e.g. > instead of <) so they show up on the page instead of effecting the markup.

How do I get CakePHP to display the content as HTML instead of just echoing it?

As a note, this is generally a very bad idea, since allowing users to input arbitrary HTML that gets displayed is the basis of XSS attacks. — Wooble
– Wooble, Commented Dec 28, 2012 at 15:35
You should show the code you use to echo the content. Helper functions generally have an escape => false option. — JJJ
– JJJ, Commented Dec 28, 2012 at 15:36
@Wooble Normally I would fear XSS attacks, but the input comes from trusted users and is displayed only to other trusted users. In future versions, I will filter out <script> tags and the like in the beforeFilter. — ahjohnston25
– ahjohnston25, Commented Dec 28, 2012 at 19:39
@Juhana I am just using an echo statement in the view. I tried to find a relevant helper method, but I could not. — ahjohnston25
– ahjohnston25, Commented Dec 28, 2012 at 19:40

Dave · Accepted Answer · 2012-12-28 17:41:02Z

2

Try using html_entity_decode.

echo html_entity_decode($theirHTML);

answered Dec 28, 2012 at 17:41

Dave

29.2k26 gold badges117 silver badges184 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

ahjohnston25 Over a year ago

That did it! It's weird, I tried this before and it didn't work. Thanks so much!

Collectives™ on Stack Overflow

CakePHP Echoing HTML from Database

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related