note 85516 deleted from function.htmlentities by danbrown

From: Date: Sun, 17 May 2009 16:46:26 +0000
Subject: note 85516 deleted from function.htmlentities by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-154888@lists.php.net to get a copy of this message
Note Submitter: kjarli at gmail dot com ---- @anotheruser at example dot com Your post is pointless. You never use htmlentities on data recieved from the user. You might only escape it when you insert it in the database user real_escape_string. Only when you display it, you change it in the template.

« previous php.notes (#154888) next »