issue with & (ampersand) in text box

[pcbob]

Either I missed it or it's not there but I wonder if anyone could help on this

Joomla 2.5.11
Virtuemart 2.0.20b

A customer has a text box for orders and one order had what was supposed to say love from steph & mike - in the cart it only displays love from steph, the rest is missing.
After a little trial and error i added "and" instead of & and it was fine, so it seems the & is being seen as a command.
Is there a way round this or will it be a case of do not use the following characters ....
Thanks in advance for any replies

[AH]

& is one of the characters that is dangerous in a user input so is stripped from text area input


This is needed to try and keep you safe!

I think the code that is responsible is:-

userfields.php

Code Select Expand

case 'textarea':
$value = JRequest::getVar($fieldName, '', 'post', 'string' ,JREQUEST_ALLOWRAW);
$value = vmFilter::hl( $value,'text' );
break;



And treh stripping is done via:-

vmfilter.php

However I would not change it!!

[pcbob]

Thanks for the reply Hutson, as I suspected it was a special character, I'm surprized I haven't come across it before.

I'll advise the customer about it and see what we can do to get around it, as per your advise I will not be changing any code.