note 109062 added to function.htmlspecialchars

This function can be used to escape single quotes only, and not double quotes, by calling it as follows. <?php $escaped_string = htmlspecialchars($string, ENT_QUOTES & ~ENT_COMPAT, $encoding); ?> This works because single/double quote escaping actually each have their own flag. #define ENT_HTML_QUOTE_NONE 0 #define ENT_HTML_QUOTE_SINGLE 1 #define ENT_HTML_QUOTE_DOUBLE 2 #define ENT_COMPAT ENT_HTML_QUOTE_DOUBLE #define ENT_QUOTES (ENT_HTML_QUOTE_DOUBLE | ENT_HTML_QUOTE_SINGLE) #define ENT_NOQUOTES ENT_HTML_QUOTE_NONE Snippet from: php-src/ext/standard/html.h https://github.com/php/php-src/blob/master/ext/standard/html.h ---- Server IP: 69.147.83.197 Probable Submitter: 80.112.215.130 ---- Manual Page -- http://www.php.net/manual/en/function.htmlspecialchars.php Edit -- https://master.php.net/note/edit/109062 Del: integrated -- https://master.php.net/note/delete/109062/integrated Del: useless -- https://master.php.net/note/delete/109062/useless Del: bad code -- https://master.php.net/note/delete/109062/bad+code Del: spam -- https://master.php.net/note/delete/109062/spam Del: non-english -- https://master.php.net/note/delete/109062/non-english Del: in docs -- https://master.php.net/note/delete/109062/in+docs Del: other reasons-- https://master.php.net/note/delete/109062 Reject -- https://master.php.net/note/reject/109062 Search -- https://master.php.net/manage/user-notes.php