Bug #62683 [NEW]: FILTER_SANITIZE_SPECIAL_CHARS does not work as declared

From: admin dot windows at gmail dot com Operating system: Windows/Linux PHP version: 5.3.15 Package: Filter related Bug Type: Bug Bug description:FILTER_SANITIZE_SPECIAL_CHARS does not work as declared Description: ------------ FILTER_SANITIZE_SPECIAL_CHARS and FILTER_SANITIZE_FULL_SPECIAL_CHARS does not work as documented and produced results does not match htmlspecialchars results at all. Test script: --------------- $string = "<a href=\"#\">O'Reilly - PHP Tips & Tricks</a>"; //string '<a href="#">O'Reilly - PHP Tips & Tricks</a>' (length=44) var_dump($string); //string '&lt;a href=&quot;#&quot;&gt;O&#039;Reilly - PHP Tips &amp; Tricks&lt;/a&gt;' (length=75) var_dump(htmlspecialchars($string, ENT_QUOTES)); //string '&#60;a href=&#34;#&#34;&#62;O&#39;Reilly - PHP Tips &#38; Tricks&#60;/a&#62;' (length=76) var_dump(filter_var($string, FILTER_SANITIZE_SPECIAL_CHARS)); //string '&#60;a href=&#34;#&#34;&#62;O&#39;Reilly - PHP Tips &#38; Tricks&#60;/a&#62;' (length=76) var_dump(filter_var($string, FILTER_SANITIZE_FULL_SPECIAL_CHARS)); Expected result: ---------------- //string '&lt;a href=&quot;#&quot;&gt;O&#039;Reilly - PHP Tips &amp; Tricks&lt;/a&gt;' (length=75) Actual result: -------------- //string '&#60;a href=&#34;#&#34;&#62;O&#39;Reilly - PHP Tips &#38; Tricks&#60;/a&#62;' (length=76) -- Edit bug report at https://bugs.php.net/bug.php?id=62683&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=62683&r=trysnapshot54 Try a snapshot (PHP 5.3): https://bugs.php.net/fix.php?id=62683&r=trysnapshot53 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=62683&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=62683&r=fixed Fixed in SVN and need be documented: https://bugs.php.net/fix.php?id=62683&r=needdocs Fixed in release: https://bugs.php.net/fix.php?id=62683&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=62683&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=62683&r=needscript Try newer version: https://bugs.php.net/fix.php?id=62683&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=62683&r=support Expected behavior: https://bugs.php.net/fix.php?id=62683&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=62683&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=62683&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=62683&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=62683&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=62683&r=dst IIS Stability: https://bugs.php.net/fix.php?id=62683&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=62683&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=62683&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=62683&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=62683&r=mysqlcfg