note 85516 added to function.htmlentities
| From: | kjarli at gmail dot com | Date: | Wed, 03 Sep 2008 12:20:42 +0000 |
| Subject: | note 85516 added to function.htmlentities | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-144112@lists.php.net to get a copy of this message | ||
@anotheruser at example dot com
Your post is pointless. You never use htmlentities on data recieved from the user. You might only
escape it when you insert it in the database user real_escape_string. Only when you display it, you
change it in the template.
----
Server IP: 89.248.170.61
Probable Submitter: 80.101.77.253
----
Manual Page -- http://www.php.net/manual/en/function.htmlentities.php
Edit -- https://master.php.net/note/edit/85516
Del: integrated -- https://master.php.net/note/delete/85516/integrated
Del: useless -- https://master.php.net/note/delete/85516/useless
Del: bad code -- https://master.php.net/note/delete/85516/bad+code
Del: spam -- https://master.php.net/note/delete/85516/spam
Del: non-english -- https://master.php.net/note/delete/85516/non-english
Del: in docs -- https://master.php.net/note/delete/85516/in+docs
Del: other reasons-- https://master.php.net/note/delete/85516
Reject -- https://master.php.net/note/reject/85516
Search -- https://master.php.net/manage/user-notes.php