SEO

#1 (**permalink**) 02-28-2008, 07:12 AM

Hi,

I want to save XML code into my database using php.

is using:

$xml = htmlentities($str, ENT_QUOTES);

and saving the converted code a fairly safe way of saving the xml? I don't
think I could have any problem with injection that way but I could be wrong.

Any idea?

Simon

#2 (**permalink**) 02-28-2008, 07:12 AM

Simon wrote:
> Hi,
>
> I want to save XML code into my database using php.
>
> is using:
>
> $xml = htmlentities($str, ENT_QUOTES);
>
> and saving the converted code a fairly safe way of saving the xml? I
> don't think I could have any problem with injection that way but I
> could be wrong.
> Any idea?
>
> Simon

That example should be safe, and you can just convert your later output
using html_entity_decode() (php 4.3+)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

saving XML code