note 109062 deleted from function.htmlspecialchars by cmb

Note Submitter: odegroot+php at gmail dot com ---- This function can be used to escape single quotes only, and not double quotes, by calling it as follows. <?php $escaped_string = htmlspecialchars($string, ENT_QUOTES & ~ENT_COMPAT, $encoding); ?> This works because single/double quote escaping actually each have their own flag. #define ENT_HTML_QUOTE_NONE 0 #define ENT_HTML_QUOTE_SINGLE 1 #define ENT_HTML_QUOTE_DOUBLE 2 #define ENT_COMPAT ENT_HTML_QUOTE_DOUBLE #define ENT_QUOTES (ENT_HTML_QUOTE_DOUBLE | ENT_HTML_QUOTE_SINGLE) #define ENT_NOQUOTES ENT_HTML_QUOTE_NONE Snippet from: php-src/ext/standard/html.h https://github.com/php/php-src/blob/master/ext/standard/html.h