why can't i display data from a postgres table in html

Question

hey so i'm storing a string like '<h1>test</h1><br><br><h1>yep</h1>' in a table then displaying the result on my webserver, the problem is that the string is exactly that, i'm trying to make it so it will acutally use the h1 tag in the source.

the type of the column i'm storing it in is text, i'm using mako templating system and pyramid web framework

heres what im getting:

what i dont want

here's what i want it to look like

what i want

i'm just using a textarea tag to input data into the table.

edit: how i'm adding the string into the db

    post_subject = request.params.get("subject")
    post_message = request.params.get("message")
    # some other stuff .....
    cur.execute("\
        INSERT INTO bulbs_Post (subcategory_id, parent_post, title, content, date, user_id, ip) VALUES \
        (%s, %s, %s, %s, now(), %s, %s)", (forum_id, parent_id, post_subject, post_message, user_id, request.client_addr))

i'm displaying the content in the template by using ${post_content}

yep but it doesn't matter because that was just an example of the kind of data that it receives — CrackSmoker9000, Sep 25 '14 at 07:19
Not nearly enough information here. What web framework are you using? How are you displaying the content? Are you using a templating system - if so which, and show the template. — Daniel Roseman, Sep 25 '14 at 07:37
1. Is the correct html text stored in the db? 2. Are you maybe implicitly escaping the text before displaying? — Hans Keﬆing, Sep 25 '14 at 07:40
like i said in the original post i'm using pyramid web framework and mako templating system. and yes when i look at the column in my sql shell it looks good — CrackSmoker9000, Sep 25 '14 at 07:41
figured it out, mako was escaping it without my knowledge. thanks hans — CrackSmoker9000, Sep 25 '14 at 07:52
http://stackoverflow.com/questions/1825343/mark-string-as-safe-in-mako this might help. not posting this as answer because i haven't tried it myself. please let know if it helps. — srj, Sep 25 '14 at 07:52
Please don't post answers by editing your question. You can post an answer to your own question which the correct way of doing it. — Joe Smart, Sep 25 '14 at 13:37

score 0 · Accepted Answer · answered Sep 26 '14 at 01:01

Alright I have figured it out, turns out when displaying the content mako was filtering the data anyways. I was able to declare the variable safe using ${post_content | n}

http://docs.makotemplates.org/en/latest/filtering.html#turning-off-filtering-with-the-n-filter

score -1 · Answer 2 · answered Sep 25 '14 at 07:19

-1

Your string is wrong. Use the following string -

<h1>test</h1><br><br><h1>yep</h1>

answered Sep 25 '14 at 07:19

Subha

1,051
1
6
12

1

How are you appending the string to the html? – Subha Sep 25 '14 at 07:22
2

Considering the raw HTML is being passed through, how did you expect this to help? – Veedrac Sep 25 '14 at 07:24

why can't i display data from a postgres table in html

2 Answers2