Jon Lachonis
Jon Lachonis

Reputation: 931

Preserve Line Breaks For SQL Insert - PHP

I have a textarea that is submitted via post. Before inserting it I am doing this:

mysql_real_escape_string($notes)

And I am outputting the retrieved record with:

stripslashes($notes)

However when I do the line breaks are removed and I get one giant paragraph.

What is the proper method to store a textarea with linebreaks and output the retrieved data?

Not sure if it matters but I am inserting to a Mssql database.

Upvotes: 1

Views: 847

Answers (1)

Marek
Marek

Reputation: 7433

stripslashes is definately not the way to output to html, to escape untrusted input, use htmlspecialchars.

Best way is to make use of white-space css rule:

<div style="white-space: pre-wrap"><?php echo htmlspecialchars($notes) ?></div>

If you see extra slashes on output, you have wrong data in database. Fix that, not the output.

Upvotes: 3

Related Questions