How to stop html injection

[coldfuse228]

Hi, I have a form that has a input box for a name. The user can put in anything they want, I even allow them to put in something like '<input name=lastNametype='text'></input>'. My question is how can I decode or encode this html so that when I display this text it will not display a text box but instead just display the text '<input name=lastNametype='text'></input>' Any sample code of this?

Thank you so much for your help,
C

[Guest]

HTMLEditFormat()

[coldfuse228]

Awesome CJ !, Thank you so much. I'm new to coldfusion, I'm just wondering how I can find functions like this or learn more about various other subjects like this, I tried searching in Google: "Coldfusion html injection" and didn't find anything like this, what is a better way to do research next time in your opinion?

Thanks so much,
C

[Guest]

the livedocs have all of the functions broken down by category. that's generally the easiest way to find the function you're looking for:

http://livedocs.macromedia.com/coldfusion/7/htmldocs/00000354.htm

(if the function you're looking for doesn't exist, the next stop would generally be http://www.cflib.org )

[coldfuse228]

Hi CJ, thanks again for all your help.

Thank you,
C