我想要的是当用户在描述框即:textarea
中的HTML
然后所有的数据被安全地存储在SQL数据库中,但如果用户给链接,那么链接也变成文本,但当用户在描述文本框中回车或换行符时,它保存在数据库中,当从数据库检索它时,换行符将再次显示。
<textarea name"description" id="description" rows="4" cols="50">
//In The text area the user enter the text. Here I want if user gives html links then links becomes text and if user give line break then line break store in the database and I can get back as it is how user submitted the form. Also I want to store data securely for avoiding sql injection but dont have the exact idea how to do it.
</textarea>
$text = $_POST['description'];
$text = htmlentities($text); // Here I want to remove html entities for avoiding sql injection
$text = mynl2br($text);
// Now Fire Insert Query All the data save but while retrieving the data I am not able to get line break and turning links to the text.
function mynl2br($text) {
return strtr($text, array("\r\n" => '<br />', "\r" => '<br />', "\n" => '<br />'));
}
这就是我正在做的,但链接仍然是链接,当我检索文本时,显示的文本没有换行。一行或一段中的所有文本。
请建议我在上面的代码中做错了什么。怎样才能避免sql注入,并能够安全地存储和检索数据。
https://stackoverflow.com/questions/52152874
复制相似问题