Problem with "

We have universal e mail 4 collecting data from a MySQL database ( in hiddeen fields ) and mailing an HTML e mail to our customer

However if anybody happens to type in " as in 12" x 9" x 3" - it stops the mail from coming through properly

Please see attached. As soon as I take out the " it works fine

How do I work around this please

John

try adding the following code at line 1 of your page;

<?php
@session_start();
if($_SERVER["REQUEST_METHOD"] == "POST")     {
    foreach($_POST as $k => $v) {
        $_POST[$k] = htmlspecialchars($v, ENT_QUOTES);
    }
}
?>

this will convert the quotes to HTML entities.

Hi

I added your code to line one of the Page carrying the UEM4 behaviour and also to the universal_e_mail Quote form in the e mail folder - but no change

Please see attached for my filles ?

Thanks for your help Jason

change:

//$_POST[$k] = htmlspecialchars($v, ENT_QUOTES);

to:

$_POST[$k] = htmlspecialchars($v, ENT_QUOTES);

right after i posted, i realized that line was commented and edited my original post, you must have been quick on ready my reply and got the code before i edited it.

Hi Jason

Still not working

I now have

<?php
@session_start();
if($_SERVER["REQUEST_METHOD"] == "POST") {
foreach($_POST as $k => $v) {
$_POST[$k] = htmlspecialchars($v, ENT_QUOTES);
}
}
?>

This is on the first line of the 2 pages I attached in the previous post

Regards

John

perhaps try using this code then:

<?php

@session_start();

if($_SERVER["REQUEST_METHOD"] == "POST")     {

    foreach($_POST as $k => $v) {

        $_POST[$k] = str_replace("\"", "&quote;",$v);

    }

}

?>

Hi Jason

Tried

<?php
@session_start();
if($_SERVER["REQUEST_METHOD"] == "POST") {
foreach($_POST as $k => $v) {
$_POST[$k] = str_replace("\"", "&quote;",$v);
}
}
?>


Still no good. Any more ideas ? Thank you for your swift assistance as always

John

try using the str_replace function in the value of the form elements so that it is already converted before posting. For example:

change:

<input name="quoteref" type="hidden" id="quoteref" value="<?php echo $row_WADAcustomer_quotes['Quote_Ref']; ?>" />

to:

<input name="quoteref" type="hidden" id="quoteref" value="<?php echo str_replace('"', '&quot;',$row_WADAcustomer_quotes['Quote_Ref']); ?>" />

Hi Jason

It now reads

12\" x 12\" x 12\"

Almost there - any idea how to remove the \

Rgds

John

use another str_replace function:

<input name="quoteref" type="hidden" id="quoteref" value="<?php echo str_replace('"', '&quot;', str_replace('\\', '' , $row_WADAcustomer_quotes['Quote_Ref'])); ?>" />