Email Address Confusion

The form configuration page accepts email addresses in "name-addr" format, e.g. "my name" <my.name@somedomain.com>, but it does not echo this format back correctly. A subsequent update of the form configuration will fail unless the email address(es) are re-entered.

The solution is to wrap all the email input values in htmlspecialchars(). Actually, all type="text" input fields should do this unless your validation either strips special characters or refuses to echo data that contains them.

Hi Chris,

Neat workaround. Provided that you use the JRequest calls, Joomla does provide some input filtering.

Bob

Actually, I should have said, to wrap the "echoing" of all ...

I'm not sure about the JRequest calls. Some of the admin setting fields are currently being echoed back with htmlspecialchars, I just followed that convention.