From: Casimir <pikEISPAMMMseli@...>
Date: 2008-08-12T17:42:34+09:00
Subject: Re: NEWBIE eruby basic form problem

Peter Woodsky kirjoitti:
> I'm trying to capture comments from a textarea field to add to a
> database but I cannot figure out how to deal with escaping the data.
> 
>   <form action="review.rhtml" method="post">
>   <input type="hidden" name="date" value="<%=today%>">
>   <label for="comment">Your Comment:</label>
>   <br>
>   <textarea name="comment" cols="60" rows="5"></textarea>
>   <p><input type="submit" value="Submit Review"></p>
>   </form>
> Is there something I can do to "<%=comment%>" to handle '' "" etc.
> 
> Many thanks any help is appreciated

You can escape characters in several different ways. The CGI class is 
handy here, too. Example follows:

require 'cgi'
puts CGI.escape("black/white")

You can also unescape strings, and so forth. See the docs at 
http://ruby-doc.org/core/classes/CGI.html

It there is some string in particular you are looking for, you can 
search for it with include?, and so on, using the String class, see docs 
here:
http://www.ruby-doc.org/core/classes/String.html

Did you have a more specific problem in mind?


Casimir Pohjanraito