Ok.
"You don't want users adding (non-whitelisted) HTML to data that appears on a page. My example is harmless, but might have been malicious. Google 'XSS'.
This brings up 2 more questions:
1. I'm assuming that since you were able to program an alert box to open, a malicious programmer could cause harm to my local machine when I open the page. Could damage also be done to the server on which this page resides?
2. I have already wrapped the variables coming from the survey in [url][/url] tags. Do I wrap the variables like this?:
[removehtml][url]...[/url][/removehtml].
Lori
From: Govinda <govinda.webdnatalk@gmail.com>
To: talk@webdna.us
Sent: Sat, March 3, 2012 4:50:36 PM
Subject: Re: [WebDNA] Search on a database
> The page took a really long time to load.
I noticed that too.
> But I wasn't able to view what you entered because the top link in seeSurveyResponses.dna is yesterday's date, not today's. So if I took a stab at how to alter your code below to have today's date appear on the link list, I would change the following:
>
> Change
> <ul>
> [loop start=1&end=10&advance=1]
>
> To
> <ul>
> [loop start=0&end=10&advance=1]
yes try that.
-G---------------------------------------------------------