possible BUG???

Hi! I donno what I've found but I can't solve it.

<form method="post" action="1.php3">
<input type="text" name="test" value="<? echo $test ?>">
<input type="submit">
</form>


If I type any characters like ', , " (which usually displays in the code like ', , ") and submit a form, all those characters are getting replaced by ', and ".

example:

' > submit form
result: ' > submit again
result: ' > submit again
result: '

does anyone have/had such a problem?

Thank you

You must have magic quotes on. You can either turn them off (see manual) or change this line:

<input type="text" name="test" value="<? echo $test ?>">

to this:

<input type="text" name="test" value="<? echo stripslashes($test) ?>">

Thank a lot man!! =)

Ooops, I made a mistake. If a " exists in $test, then the value will not parse right as HTML will interpret that " as the closing " of value.

You need to do one more operation:

<input type="text" name="test" value="<? echo htmlspecialchars(stripslashes($test)) ?>">

htmlspecialchars() converts &,",<,> to &,",>,&lt respectively so it will display properly.