Q: The escaping of HTML stored in my databases is posing a real problem.
A: SQL Solution™ passes all output through PHP's htmlspecialchars()
function
so information stored by users won't trip up the HTML or cause devilish Java Scripts to be run.
Our Safe Markup Language is devised to get around this limitation while preserving security. But, it's limited. One option is modifying the SML operations to better meet your needs.
If you really need to circumnavigate this security measure, the htmlspecialchars()
function can be commented out of the RecordAsAssocArray()
and
RecordAsEnumArray()
functions.
We strongly advise against doing this.