input TYPE_STR , is it safe enough in this case ?

[kh99]

Originally Posted by vbenhancer

TYPE_NOHTML will do your job...

...except that the OP says that TYPE_NOHTML messed things up. Looking at includes/class_core.php it looks like cleaning a TYPE_NOHTML value does this:

PHP Code:

str_replace(
    // replace special html characters
    array('<', '>', '"'),
    array('&lt;', '&gt;', '&quot;'),
    preg_replace(
        // translates all non-unicode entities
        '/&(?!' . ($entities ? '#[0-9]+|shy' : '(#[0-9]+|[a-z]+)') . ';)/si',
        '&amp;',
        $text
    )
); 


so maybe you could leave it as TYPE_STR but clean it yourself using the above code, and take out the part that replaces the quotes.