note 83216 added to function.htmlspecialchars

I know some people posted similar functions but may be you are looking for this version: function jschars($str) { $str = mb_ereg_replace("\\\\", "\\\\", $str); $str = mb_ereg_replace("\"", "\\\"", $str); $str = mb_ereg_replace("'", "\\'", $str); $str = mb_ereg_replace("\r\n", "\\n", $str); $str = mb_ereg_replace("\r", "\\n", $str); $str = mb_ereg_replace("\n", "\\n", $str); $str = mb_ereg_replace("\t", "\\t", $str); $str = mb_ereg_replace("<", "\\x3C", $str); // for inclusion in HTML $str = mb_ereg_replace(">", "\\x3E", $str); return $str; } if you use smarty your code may look like: <a onclick="alert('{$text|jschars|htmlchars}');return false;">Test</a> (Yes, we have the shortcur htmlchars instead of htmlspecialchars, so we are able to tell the encoding e.g. UTF-8 or ISO-8859-1 to htmlspecialchars) ---- Server IP: 217.13.201.10 Probable Submitter: 88.66.27.159 ---- Manual Page -- http://www.php.net/manual/en/function.htmlspecialchars.php Edit -- https://master.php.net/note/edit/83216 Del: integrated -- https://master.php.net/note/delete/83216/integrated Del: useless -- https://master.php.net/note/delete/83216/useless Del: bad code -- https://master.php.net/note/delete/83216/bad+code Del: spam -- https://master.php.net/note/delete/83216/spam Del: non-english -- https://master.php.net/note/delete/83216/non-english Del: in docs -- https://master.php.net/note/delete/83216/in+docs Del: other reasons-- https://master.php.net/note/delete/83216 Reject -- https://master.php.net/note/reject/83216 Search -- https://master.php.net/manage/user-notes.php