Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Inconsistent escaping of problem characters for SQL (' & etc.)
02-25-2014, 09:55 AM
Post: #1
Inconsistent escaping of problem characters for SQL (' & etc.)
While setting up my chart of accounts I notice the ampersand exists in the default account "Furniture & Fixtures", however adding a new account with the ampersand results in it being stored in the database and returned as "&" the HTML escape code (which actually isn't processed by the
browser for some reason (this is true for GLAccounts.php)).

For AccountSections.php the same problem occurs, actually it's a bit worse as the escape code will be escaped multiple times AND will generate an error (tested with single quote AKA I renamed "Financed By" with "Owner's Equity")

I understand the importance of escaping some characters for the sake of SQL but those operations should be invisible on output from SQL, right?
Find all posts by this user
Quote this message in a reply
Post Reply 


Messages In This Thread
Inconsistent escaping of problem characters for SQL (' & etc.) - serakfalcon - 02-25-2014 09:55 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)