[drupal-docs] migration guidelines thinko?

Dries Buytaert dries.buytaert at gmail.com
Sun Sep 4 13:29:34 UTC 2005


On 03 Sep 2005, at 20:31, Gabor Hojtsy wrote:
> --------------
> In general you will want to use check_markup($text, $format, TRUE)  
> prior
> to validating or saving the $text and use check_markup($text, $format,
> FALSE) when viewing the $text. In some cases, especially if you are
> using filters which include PHP code, you probably want to call
> check_markup($text, $format, FALSE) in the latter case too.
> --------------

That last sentence doesn't make sense to me.

You want to use $check = TRUE just before rendering content (using  
the filter system) that is potentially unsafe (eg. all content that  
isn't saved yet).

In 4.6 $check defaults to FALSE.  In HEAD, $check defaults to TRUE  
because it considered to be more secure.

--
Dries Buytaert  ::  http://www.buytaert.net/




More information about the drupal-docs mailing list