From 5e6775e093bf3b5cdc5f6883bb05826c7a96a197 Mon Sep 17 00:00:00 2001 From: moodler Date: Tue, 10 Aug 2004 02:27:15 +0000 Subject: [PATCH] Added guideline for format_text. Fixes bug 1722 --- lang/en/docs/coding.html | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lang/en/docs/coding.html b/lang/en/docs/coding.html index 38b4be4187..fd4c8bda86 100755 --- a/lang/en/docs/coding.html +++ b/lang/en/docs/coding.html @@ -43,6 +43,9 @@ has magic_quotes applied (regardless of the PHP settings) so that you can safely insert it straight into the database. All other raw data (from files, or from databases) must be escaped with addslashes() before inserting it into the database. +
  • IMPORTANT: All texts within Moodle, especially those that have + come from users, should be printed using the format_text() function. This ensures that + text is filtered and cleaned correctly.
  •  

    Coding Style

    -- 2.39.5