#4068 [Opn->Csd]: htmlentities fails to escape single quote character
| From: | hholzgra@php.net | Date: | Mon, 30 Sep 2002 23:05:21 +0000 |
| Subject: | #4068 [Opn->Csd]: htmlentities fails to escape single quote character | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-20813@lists.php.net to get a copy of this message | ||
ID: 4068
Updated by: hholzgra@php.net
Reported By: php@jon.oaktree.co.uk
-Status: Open
+Status: Closed
Bug Type: Misbehaving function
Operating System: Any
PHP Version: 3.0.16
New Comment:
there's an additional parameter to htmlentites to control this behavior
since php3.0.17 and php4.0.3
Previous Comments:
------------------------------------------------------------------------
[2000-04-07 10:57:24] php@jon.oaktree.co.uk
Script to reproduce problem:
<img alt='<? echo htmlentities($foo) ?>'>
Fix:
Make it escape the "'" character too.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=4068&edit=1