Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #101585 > unrolled thread

Data Entry

Back to article view | Back to comp.lang.python

Contents

  Data Entry tdsperth@gmail.com - 2016-01-12 17:52 -0800
    Re: Data Entry Chris Angelico <rosuav@gmail.com> - 2016-01-13 13:01 +1100
    Re: Data Entry tdsperth@gmail.com - 2016-01-12 18:58 -0800
    Re: Data Entry Peter Otten <__peter__@web.de> - 2016-01-13 12:21 +0100
    Re: Data Entry Chris Angelico <rosuav@gmail.com> - 2016-01-13 22:29 +1100

#101585 — Data Entry

Hi All

I have written a small web app using cgi for testing for changes to data from a python script that does a lot of database updating depending on certain conditions 

form = cgi.FieldStorage()
cRefNo = form.getvalue('refno')


cElectSupp = form.getvalue('electsupp')


 print('<font size = 3 color = "black">Electrical Supplier : <input type="text" name="electsupp" value=%s>'%cElectSupp)


If i change the value from origin to origin energy and save - the value updated to the database is correct but when the page is re displayed it only
shows origin in the text field - as if it ignores everything after the space.

How do I make it display the full name.

Cheers

Colin

[toc] | [next] | [standalone]

#101586

On Wed, Jan 13, 2016 at 12:52 PM,  <tdsperth@gmail.com> wrote:
> If i change the value from origin to origin energy and save - the value updated to the database is correct but when the page is re displayed it only
> shows origin in the text field - as if it ignores everything after the space.
>
> How do I make it display the full name.
>

To set a multi-word value as an HTML attribute, you'll need to put
quotes around it. You might be able to get away with using %r instead
of %s, or even just "%s", but proper escaping would be the best way.

ChrisA

[toc] | [prev] | [next] | [standalone]

#101588

On Wednesday, January 13, 2016 at 9:52:17 AM UTC+8, tdsp...@gmail.com wrote:
> Hi All
> 
> I have written a small web app using cgi for testing for changes to data from a python script that does a lot of database updating depending on certain conditions 
> 
> form = cgi.FieldStorage()
> cRefNo = form.getvalue('refno')
> 
> 
> cElectSupp = form.getvalue('electsupp')
> 
> 
>  print('<font size = 3 color = "black">Electrical Supplier : <input type="text" name="electsupp" value=%s>'%cElectSupp)
> 
> 
> If i change the value from origin to origin energy and save - the value updated to the database is correct but when the page is re displayed it only
> shows origin in the text field - as if it ignores everything after the space.
> 
> How do I make it display the full name.
> 
> Cheers
> 
> Colin

Hi Chris 
%r worked a treat

thanks
Colin

[toc] | [prev] | [next] | [standalone]

#101603

Chris Angelico wrote:

> On Wed, Jan 13, 2016 at 12:52 PM,  <tdsperth@gmail.com> wrote:
>> If i change the value from origin to origin energy and save - the value
>> updated to the database is correct but when the page is re displayed it
>> only shows origin in the text field - as if it ignores everything after
>> the space.
>>
>> How do I make it display the full name.
>>
> 
> To set a multi-word value as an HTML attribute, you'll need to put
> quotes around it. You might be able to get away with using %r instead
> of %s, or even just "%s", 

That is bad advice that "works" until there is a value containing 
quotes or other markup.

> but proper escaping would be the best way.

OP, that's what you should do. Either pick one of the many templating 
languages -- a simple one is

http://bottlepy.org/docs/dev/stpl.html

>>> from bottle import SimpleTemplate
>>> SimpleTemplate('... value="{{supplier}}">').render(
... supplier="<foo> 'bar' \"baz\"")
'... value="&lt;foo&gt; &#039;bar&#039; &quot;baz&quot;">'

-- or at least manually apply html.escape() to the value:

>>> import html
>>> '... value="%s">' % html.escape("<foo> 'bar' \"baz\"")
'... value="&lt;foo&gt; &#x27;bar&#x27; &quot;baz&quot;">'

[toc] | [prev] | [next] | [standalone]

#101604

On Wed, Jan 13, 2016 at 10:21 PM, Peter Otten <__peter__@web.de> wrote:
>> To set a multi-word value as an HTML attribute, you'll need to put
>> quotes around it. You might be able to get away with using %r instead
>> of %s, or even just "%s",
>
> That is bad advice that "works" until there is a value containing
> quotes or other markup.
>

Which is why I said "get away with". If you know your data, you might
know that it can have spaces but never quotes, for instance. But
proper escaping is definitely the way to go.

ChrisA

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.python

csiph-web