[SOLVED] Dont touch my code

DAL · #1 (**permalink**) 07-11-08, 03:27 PM

In relation to the post strip_tags or htmlspecialchars I actually need the reverse.

I have a area where my code is saved and then loaded back into the page. The problem is, and Im sure Ive never had this problem before on previous installs of PHP, is that all html characters are encoded to & lt; and & gt; for the < >. which is not good when I load the html up as its just a block of code instead of actually being HTML. I thought I could correct this after I stripslashes then run html_entity_decode but it doesnt do anything. Since the world of encoding is a complex ever-changing subject and my basic foundations seem to have slipped away from me Im in need of help.

Quote from tizag.com.

Quote:

The htmlentities function takes a string and returns the same string with HTML converted into HTML entities. For example, the string "<script>" would be converted to "<script>".

By converting the < and > into entities, it prevents the browser from using it as an HTML element and it prevents the code from running if you were to display some user's input on your website.

Even tizag describes it as the way I thought it worked but it doesnt. Im not sure but does the fact that the file is xhtml have anything to do with it?

Thanks
Dal

wirehopper · #2 (**permalink**) 07-11-08, 05:09 PM

http://us2.php.net/manual/en/functio...ity-decode.php

DAL · #3 (**permalink**) 07-11-08, 05:25 PM

Quote:

Originally Posted by wirehopper

http://us2.php.net/manual/en/functio...ity-decode.php

Thanks wirehopper but Ive already tried this.

Quote:

"I thought I could correct this after I stripslashes then run html_entity_decode but it doesnt do anything."

Nico · #4 (**permalink**) 07-11-08, 05:28 PM

Can you post? Sounds more like an error on your side.

DAL · #5 (**permalink**) 07-11-08, 06:23 PM

Sure Nico

PHP Code:


			

<?php


PublishPage();

function PublishPage()
{
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<script type="text/javascript">
//<![CDATA[

function LoadBox()
{
    document.getElementById('test').innerHTML = document.getElementById('CodeArea').innerHTML;
}

//]]>
</script>
</head>

<body>

<form action="" method="post">

  <img id="writeback" tabindex="1" value="writeback" src="somejpg.jpg" alt="writeback" onclick="LoadBox();" />
  <input name="testbutton" type="image" id="testbutton" tabindex="1" value="Save" src="aomejpg.jpg" alt="Save"  />  

<div id="test"></div>

<textarea name="CodeArea" id="CodeArea" ><?php echo html_entity_decode(stripslashes($_POST['CodeArea'])); ?></textarea>


</form>
</body>
<html>
<?php
}
?>

The project is alot bigger than this but this is the part I cant get to work.

Anyway, to test it simply copy some html into the text area ie

HTML Code:

<div>some sample text</div>

Click save to $_POST is back to the form and auto populate the text area then use the javascript function to write the contents over to the div.

Thanks

OOPS = I had a few mistakes in my above example. That should work now. Maybe its the javascript side thats causing my issues. I never thought to check. ?? Im unsure though because I use a javascript function to copy the html into the text area in my main project so I would know if its js thats causing the convert.

DAL · #6 (**permalink**) 07-12-08, 10:18 AM

Ive uploaded the script so it will be easy for anyone to test what I mean.

Simply enter something like

HTML Code:

<div>Some sample text</div>

into the text area then click "Save" then when the page refeshes click "Writeback"

As you can see it writes

"<div>Some sample text</div>"
code = <div>Some sample text</div>

instead of
"Some sample text"
code = <div>Some sample text</div>

DAL · #7 (**permalink**) 07-12-08, 11:44 AM

Through further testing I have found it to be a javascript error. (Please move my post to Javascript)

Original;

HTML Code:

document.getElementById('test').innerHTML = document.getElementById('CodeArea').innerHTML;

modified;

HTML Code:

document.getElementById('test').innerHTML = document.getElementById('CodeArea').value;

Who would have 'funk it' eh!

Obvously no-one in here (PHP discussion)