3 ms·
> So the company value will be stored like this: ' or '=' instead of this " or ""=" No, if they enter '"', store it as '"' in your database (maybe by using '\"
by gungsukma2 5y ago
> So the company value will be stored like this: ' or '=' instead of this " or ""="
No, if they enter '"', store it as '"' in your database (maybe by using '\"' in the query), serve it as ''' in html ('"', actually).
- marcos100 5y agoYes, you should persist the raw user input. Why would my non-html gui app show some escaped html?