Question

how to sanitize user inputs that you gather by jquery .val() so you can write it in a dataString… in the example you see below when user writes

if some text that contains & the rest
of the comment doesn’t seem to work
fine because it counts the rest as an
other variable to POST..

is there a sanitaziation or
serialization code? jQuery’s
sanitize() function works on forms but
i want something that i can use
directly use on strings…

var id = $("some_id_value_holder_hidden_field").val();
var comment = $("#sometextarea").val();

var dataString = "id=" + id + "&comment=" + comment;

$.ajax({

type: "POST",
url: "write_comment.php",
data: dataString,
dataType: "json",
success: function(res) {
  // Success
},
error: function(xhr, textStatus, errorThrown) {
  // Error
}
});

Any suggestion will be much appreciated
Regards

Answer 1

there is a built-in encodeUriComponent that does exactly what you’re looking for. Besides that, you can provide an object in “data” field, in which case url encoding will be handled by jquery. In your example:

 $.ajax({
     type: "POST",
     url: "write_comment.php",
     data: { id: id, comment: comment},
     etc...