Page 1 of 1

SetParameterType and problem with "

Posted: Tue Jan 04, 2011 11:52 pm
by raph
I've got parameter like:

Code: Select all

$this->SetParameterType('company_type', CLEAN_STRING); 
in my module. The problem is when user types:
"company"

after the submit (when validation of form fails) in "company_type" input there is:
"company"
The similar problem is with
'company'

which turns into
'company'
I know this because CLEAN_STRING parameter, but I need """ and "'" chars to display not as entities and I want to keep XSS prevention also. Is there any possibility to do this without using CLEAN_NONE and to make this change quite easy without changing code with all my 'action" files?