[support] sanitizing text box input for sql searches (custom search)

Michel Morelli michel at ziobuddalabs.it
Wed Mar 3 12:52:15 UTC 2010


Fred Jones ha scritto:
>> http://api.drupal.org/api/function/db_query/6
>>     
>
> What about when doing node_load() and displaying HTML?
Attention: node_load() is not the step when node is rendered.
Install "devel" module and you can see two new tabs for every node:  
"Dev Load" and "Dev Render".
The first contains data of the node when it is loaded and the second 
contains the node's data when it's rendered (for display/html).


>  I never can
> find the function to clean up HTML for XXS and whatever before
> displaying...
>   
you need to use "input filter" and the function to use is "|check_markup".

M.
|

-- 
Michel 'ZioBudda' Morelli                       michel at ziobuddalabs.it
Sviluppo applicazioni CMS DRUPAL e web dinamiche (LAMP+Ajax)
Telefono: 0200619074
Telefono Cell: +39-3939890025 --  Fax: +39-0291390660

http://www.ziobudda.net                         ICQ: 58351764  
http://www.ziobuddalabs.it                      Skype: zio_budda
http://www.ziodrupal.net       			MSN: michel at ziobuddalabs.it                   
						JABBER: michel at ziobuddalabs.it

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20100303/e36895e6/attachment.html 


More information about the support mailing list