note 102871 deleted from function.htmlspecialchars by cmb
| From: | cmb@php.net | Date: | Sun, 27 Oct 2019 09:12:30 +0000 |
| Subject: | note 102871 deleted from function.htmlspecialchars by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-212836@lists.php.net to get a copy of this message | ||
Note Submitter: pinkgothic at gmail dot com
----
Please note that this function results in an E_WARNING when display_errors is off and an invalid
multibyte string is passed to it (e.g. with 'utf-8' as the encoding parameter and broken
utf-8 characters somewhere in the string).
This is ESPECIALLY IMPORTANT if you have an EXCEPTION-THROWING ERROR HANDLER, since even though you
can't reproduce it in a development mode where display_errors is on, you MUST wrap your
function call in a try-catch, or your application will crash.
[ The reason PHP makes this distinction is because this is a core function and many production
servers are misconfigured to have display_errors on (to prevent such things as path disclosure from
error messages from accidentally cropping up). See: http://bugs.php.net/bug.php?id=47494 ]