Req #62574 [Com]: New operator for htmlspecialchars
| From: | dagguh at gmail dot com | Date: | Fri, 26 Oct 2012 19:07:08 +0000 |
| Subject: | Req #62574 [Com]: New operator for htmlspecialchars | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-174365@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=62574&edit=1
ID: 62574
Comment by: dagguh at gmail dot com
Reported by: thbley at gmail dot com
Summary: New operator for htmlspecialchars
Status: Open
Type: Feature/Change Request
Package: *General Issues
PHP Version: Irrelevant
Block user comment: N
Private report: N
New Comment:
This is valid.
@ajf:
You should never dop anything "ahead-of-time" in programming. You shoudl escape a
variable right before passing it to en environment, that requires this form of
escaping
Previous Comments:
------------------------------------------------------------------------
[2012-09-04 18:15:37] ajf at ajf dot me
(I'm all for this though, I'm just pointing out other options)
------------------------------------------------------------------------
[2012-09-04 18:06:32] ajf at ajf dot me
You can escape things ahead-of-time, you know. In fact, I have a feeling you
could use foreach to traverse the symtable and escape everything. (don't do that
though, that's a horrendous idea)
------------------------------------------------------------------------
[2012-07-16 04:07:43] thbley at gmail dot com
Description:
------------
old:
<?php
echo htmlspecialchars($str, ENT_QUOTES);
<?= htmlspecialchars($str, ENT_QUOTES) ?>
new:
echo <$str>;
<?= <$str> ?>
or:
<?+ $str ?>
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62574&edit=1