Hot answers tagged forms
When getting user input to be stored on database, a good way to proceed is: Data validation: validate the data according whith the data you expect. For example: HTML string, number, email, URL, any text with no HTML, ect. Never trust on user input or client-side validation. You can make here also some sanitization, but it is not substitute of data ...
You should be able to paste the HTML of the Google Docs iframe directly into the page by using the TEXT mode of the edit form (instead of the VISUAL) mode. That mode allows you to enter the HTML directly, while the WYSIWYG editor will either ignore it or treat it as text.
The * appears under the field because the field is inside the label. There doesn't appear to be any useful filters for this, but you could use one of the hooks to inject some JS on the page that adds the *: required = jQuery( "<span>*</span>" ); required.css("color", "red"); jQuery('label br').before( required ); Note: if you're going to use a ...
To be honest I think this question is off topic, because its topic is so a general concept that can apply to any language capable to handle web development. So is even broader than a general PHP question. By the way, what I want to suggest is too much for a comment. When you need to check data coming from trusted users (assuming you already have a way to ...
Only top voted, non community-wiki answers of a minimum length are eligible