Justtechjobs.com Find a programming school near you






Online Campus Both


php-db | 2005011

Re: [PHP-DB] Input ++90 causing problems From: ioannes (ioannes <email protected>)
Date: 01/14/05

When I copy the php page and paste in a new page, upload that, and view with
the same ? variables, it works (the css works and no js errors), however
when I use the original php page, and then change the URL manually in the IE
address line, it again does not work (css screwed up etc)!

----- Original Message -----
From: "graeme" <graeme_foster <email protected>>
To: "ioannes" <ioannes <email protected>>
Cc: <php-db <email protected>>
Sent: Friday, January 14, 2005 8:17 AM
Subject: Re: [PHP-DB] Input ++90 causing problems

It appears as plus sign and numbers on my computer.

graeme.

ioannes wrote:

>It appears that the code below in short has the following problematic
>strings:
>
>++90 ++90-212- gives ﯝ ﯝ212- on my test page below: error2.htm. A clue
>might be that a search on google turns up Arabic unicode, and the input
>here was done in Turkey. check the link:
>http://www.londonriverside.co.uk/error2.htm and let me know if it appears
>the same to you or is a function of my computer, which includes Japanese
>libraries. (In order to send this message I need to choose unicode
>formatting.)
>++90 ++90 gives ++90 ++90 on error3.htm - and is correct
>
>The string ++90 came from a web input form, where someone was putting in
>their phone number. It was stored in a database and retrieved onto a web
>page, all using php, on which page it screwed up the css and caused unusual
>javascript errors. Although when the same person input the same phone
>number on the same form again, the same problem did not occur all the time
>but did re-occur at least twice. I cut down the HTML and finally found
>these few figures seemed to be the cause, though if I used my HTML editor
>to applyt auto-formatting to the page the error did not occur. Also if I
>simply deleted the ++90 characters and typed them in again and uploaded
>that, there were no errors. Confusingly, href links to other pages
>requiring a query to be run on the same record in the database - although
>it does not require to retrieve and show the phone number on the htm page
>but does use the index reference of the record - fails to retrieve any
>information for the record, eg my dates just default to 01/01/1970
>erroneously and other info is retrieved on the record, in this case there
>is no css problem or javascript error in the static HTML, just no data to
>show within the page. Also note that when I get into the table and cut and
>paste all the info to a new record, the new record works - ie I can
>retrieve it with same tel numbers and everything works.
>
>Is there something about this string ++90 that is problematic, possibly in
>relation to being sent from an internet form initially? If it's simply a
>familiar error from Arabic unicode perhaps I should be filtering this out
>on all input pages? are there other such problematic strings? what am I
>searching for if I search for good input filtering for web input forms?
>
>John
>
>
>
>I did the following test pages:
>
>error2.htm:
>
><html>
><head>
><title>test</title>
>
><LINK href="styles/test.css" type=text/css rel=stylesheet>
></head>
><body text="#000000" leftmargin="0" topmargin="0" marginwidth="0"
>marginheight="0" bgcolor="#ffffff">
><table width="1000" border="1" cellspacing="0" cellpadding="0">
><tr><td class=textset3 colspan=12>
>++90 ++90-212-
></td></tr></table>
>
></body>
></html>
>
>error3.htm:
>
><html>
><head>
><title>test</title>
>
><LINK href="styles/enquiries_css.css" type=text/css rel=stylesheet>
></head>
><body text="#000000" leftmargin="0" topmargin="0" marginwidth="0"
>marginheight="0" bgcolor="#ffffff">
><table width="1000" border="1" cellspacing="0" cellpadding="0">
><tr><td class=textset3 colspan=12>
>
> ++90 ++90
>
> </td></tr></table>
>
></body>
></html>
>

-- 
Experience is a good teacher, but she sends in terrific bills.

Minna Antrim

-- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php