As I understand it the url-encode function strips out spaces and replaces them with a '+', which should then be stripped out when saving and displaying the data, but what we are getting is the '+' remaining in the text, so if the user types 'Customer rejected this on 25/6' it is saved to the database as 'Customer+rejected+this+on+25/6'. anyone got any thoughts please?
Apologies should have mentioned, Progress 10.2B04
Hello,
I am guessing that you are trying to prevent special HTML characters to be interpreted.
In WebSpeed, you can use html-encode and url-encode to prevent the interpretation of these characters.
Html-encode is used when outputting the content of the HTML page, url-encode for writing URLs for text either in the actual URL or as part of the QUERY_STRING.
These functions can be used to prevent cross site scripting issues (XSS).
Also, based on the requirements and understanding of the data that is accepted and saved into the database, you can filter the data.
Notice that the data could be entered and displayed from different type of interfaces, from a web interface, GUI or TTY.
I hope this helps.