<script type="text/javascript">
function methons(){
var obj=document.getElementById("pwdanswer");
var str=obj.value;
alert(str);
str=str.replace(/\</ig,"<");
str=str.replace(/\>/ig,">");
//obj.value=str;
alert(obj.value); }
</script>
<input class="standardButton" type="submit" name="submitType" value="Ok" onclick="methons()"> 这个方法当我输入>后点击按钮提交,还是会变成<括号。然后我找到了另外一种,但是不知道是不是写错了,另外如何调用
function HTMLEnCode(str)这个方法呢?onclick如何写??请教请教<script language=javascript> function HTMLEnCode(str)
{
var s = "";
if (str.length == 0) return "";
s = str.replace(/&/g, ">");
s = s.replace(/ </g, "<");
s = s.replace(/>/g, ">");
s = s.replace(/ /g, " ");
s = s.replace(/\'/g, "'");
s = s.replace(/\"/g, """);
s = s.replace(/\n/g, " <br>");
return s;
}
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>无标题文档</title>
<script type="text/javascript">
function HTMLEnCode(str)
{
var s = "";
if (str.length == 0) return "";
s = str.replace(/&/g, ">");
s = s.replace(/ </g, "<");
s = s.replace(/>/g, ">");
s = s.replace(/ /g, " ");
s = s.replace(/\'/g, "'");
s = s.replace(/\"/g, """);
s = s.replace(/\n/g, " <br>");
alert(s);
return s;
}
</script>
</head><body>
<input type="text" id="text" />
<input class="standardButton" type="submit" name="submitType" value="Ok" onclick="HTMLEnCode(document.getElementById('text').value);" />
</body>
</html>
{
var s = "";
if (str.length == 0) return "";
s = str.replace(/&/g, ">");
s = s.replace(/ </g, "<");
s = s.replace(/>/g, ">");
s = s.replace(/ /g, " ");
s = s.replace(/\'/g, "'");
s = s.replace(/\"/g, """);
s = s.replace(/\n/g, " <br>");
alert(s);
return s;
} </script>
<input class="standardButton" type="submit" name="submitType" value="Ok" oonclick="HTMLEnCode(document.getElementById('pwdanswer').value);" >
<input type="text" size="60" name="password_answer" id="pwdanswer" value="$!password_answer" >
<script type="text/javascript">
function methons(){
var obj=document.getElementById("pwdanswer");
var str=obj.value;
alert(str);
obj.value=HTMLEnCode(str);
alert(obj.value);
}
function HTMLEnCode(str){
var s = "";
if(str.length == 0) return "";
s = str.replace(/&/g, "&");
s = s.replace(/</g, "<");
s = s.replace(/>/g, ">");
s = s.replace(/ /g, " ");
return s;
}
</script>
<textarea id="pwdanswer">
<>
</textarea>
<input class="standardButton" type="button" name="submitType" value="Ok" onclick="methons()">
function methons(){
var obj=document.getElementById("pwdanswer");
var str=obj.value;
alert(str);
var s = HTMLEnCode(str);
alert(s);
document.getElementById("pad").innerHTML = s
}
function HTMLEnCode(str){
var s = "";
if(str.length == 0) return "";
s = str.replace(/&/g, "&");
s = s.replace(/</g, "<");
s = s.replace(/>/g, ">");
s = s.replace(/ /g, " ");
return s;
}
</script>
<textarea id="pwdanswer">
<>
</textarea>
<input class="standardButton" type="button" name="submitType" value="Ok" onclick="methons()">
<div id="pad"></div>
递交前根本不需要处理,直接递交。
只要在输出时处理就可以了,两种方式。服务器端替换<>或客户端替换<>