Reputation: 931
I have a textarea that is submitted via post. Before inserting it I am doing this:
mysql_real_escape_string($notes)
And I am outputting the retrieved record with:
stripslashes($notes)
However when I do the line breaks are removed and I get one giant paragraph.
What is the proper method to store a textarea with linebreaks and output the retrieved data?
Not sure if it matters but I am inserting to a Mssql database.
Upvotes: 1
Views: 847
Reputation: 7433
stripslashes
is definately not the way to output to html, to escape untrusted input, use htmlspecialchars
.
Best way is to make use of white-space
css rule:
<div style="white-space: pre-wrap"><?php echo htmlspecialchars($notes) ?></div>
If you see extra slashes on output, you have wrong data in database. Fix that, not the output.
Upvotes: 3