problem with Zend_Filter_HtmlEntities

derrida · #1 (**permalink**) 11-11-2009, 12:53 PM

Hi

i have a form for comments and it work great with english and hebrew untill i add the filer Zend_Filter_HtmlEntities.
if i remove the filer i can send in hebrew but the i can use javascript in the form, so there is a security issue here.

i echoed the post variable with and without the filter:
without the hebrew is there.
with: instead of the hebrew i get all sorts of symbols.

the page charset is utf-8, and hebrew is displyed.

this is the implementation:

Code:

           $htmlentities = new Zend_Filter_HtmlEntities();

           $name = $htmlentities->filter($this->_request->getPost('name'));
           $title = $htmlentities->filter($this->_request->getPost('title'));
$commentField=$htmlentities->filter($this->_request->getPost('comment'));

what am i doing wrong here?

best regards

ron

derrida · #2 (**permalink**) 11-11-2009, 05:00 PM

hi

i found this article that addresses this very problem, it is explained great and worked for me:
htmlentities and character encoding Drowned World

hope it will help others too

ron

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode