PHP to output single and double quotes as a value for an input element

Question

I have a value ($title) that is stored in MySQL and is being called, using PHP, to be inserted into the value of an input element. The problem is when a single or double quote is used, the value of the input field terminates at that point.

The behavior that should occur is the input field should be populated EXACTLY with the data in the $title variable, so that when the form is updated, the quotes remain intact.

Here is the PHP:

<?php
    echo '<input type=text size=91 name=title value="'.stripslashes($title).'">';
?>

Now, here is a typical problem: if the value of $title

this is a test " of what occurs with a quote

and I echo the variable, it echos correctly to

this is a test " of what occurs with a quote

However, when used in an input field, it renders as:

<input value="this is a test " of what occurs with a quote">

The first " terminates the value of the field, causing the new value to be:

this is a test 

I'm confused as to how to get the proper value to display and be submitted with the form, when that variable is displayed and updated.

Answer 1

Try using htmlspecialchars. This will escape the " in yout title.

value="'.htmlspecialchars($title).'">