note 26338 deleted from function.htmlentities by vincent
| From: | vincent@php.net | Date: | Fri, 23 Jan 2004 12:42:14 +0000 |
| Subject: | note 26338 deleted from function.htmlentities by vincent | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-64064@lists.php.net to get a copy of this message | ||
Note Submitter: ressler@usma.edu
----
This function is for more than protecting special characters in value tags! Any time you are
displaying text that was provided earlier by a user, you need this function. For instance, if a
fun-loving user provides the text:
<script>for(;;) alert('Gotcha!')</script>
then future displays of it lock up the browser of the requestor. The < > must be converted to
< and >!