Questions tagged [htmlspecialchars]

htmlspecialchars is a PHP function that convert special characters to HTML entities.

Famous question: htmlentities() vs. htmlspecialchars()

467 questions

votes

1 answer

How to implement htmlpurifier

I'm trying to implement HTMLPURIFIER, but after echoing out the HTML I'd like to purify, I still get my picture

as part of the content that's displayed, meanwhile it's meant to display a picture. What am I doing wrong? …

php htmlpurifier htmlspecialchars

asked Jun 19 '12 at 00:11

user652792

votes

1 answer

Concatenate string with space mysql php

$menunaam = "Lazy Dog" $resultmenus = mysqli_query($dbc,"SELECT menunaam FROM prijslijst WHERE menunaam='$menunaam'"); $row = mysqli_fetch_array($resultmenus,MYSQLI_ASSOC); echo "

php sql concatenation htmlspecialchars

asked Jun 08 '12 at 21:59

Seltjoek

votes

2 answers

Remove special HTML characters from labels or textfields in flex (mxml)

I'm loading data with an RSS feed into a Flex application. Some of the data has html special characters. It can't read é,è,à,ç and other similar letters that are used in French for example. It gives a strange code instead of the letters with…

html apache-flex special-characters mxml htmlspecialchars

asked Jun 05 '12 at 16:41

Guillaume Thys

votes

1 answer

Should I be using nl2br(htmlspecialchars($text)) for everything I echo/print to screen?

Title kinda says it all. Should I be using nl2br(htmlspecialchars($text)) for everything I echo/print to screen? I've been looking around, and it seems like the word is that when handling input from the user, sanitize it by escaping it and…

php database string htmlspecialchars

asked Jun 01 '12 at 05:46

carlinyuen

votes

3 answers

Avoiding the use of htmlspecialchars() on on dynamic contents, while avoiding XSS attacks

I need your help with a really simple issue. Article Contents of some pages on my website are stored in MySQL database, and I've applied htmlspecialchars() to it when outputting to the browser, but actually there are legitimate

php image xss htmlspecialchars

asked May 21 '12 at 21:19

user652792

votes

6 answers

User Input filtering in PHP

Am currently working on an application that requires users to submit posts and comments which is displayed on the site. As we all know that user input can't be trusted so i used htmlspecialchars($string,ENT_QUOTES) to process user's posts and…

php blogs user-input textinput htmlspecialchars

asked Jun 23 '09 at 10:18

War Coder

votes

1 answer

Does sometime fputs() or fwrite() encode html special characters?

I am outputting a string that consists of html content to a html file, but in the html file the html special characters are encoded (for example " in \" ). I've even used htmlspecialcharacters_decode before using the write functions. The wierd…

php html string character-encoding htmlspecialchars

asked Apr 17 '12 at 21:11

andreihondrari

5,743
5
30
59

votes

1 answer

Outputting user input - preventing for xss

I have an admin section within my site where items can be stored. Once they are stored, they are displayed on the front end. Part of my display involves code like the following: echo "

".$rose['description']."

"; Does this need to have…

php xss htmlspecialchars

asked Apr 13 '12 at 08:05

user1278496

1,056
6
17
34

votes

2 answers

Convert '%23' to '#' in PHP

URL: example.com/search:#searchWord Since the # is not send to the server, it is changed to %23. In the search page I want to display Results for: #searchWord But what I get is %23searchWord. I tried htmlspecialchars(), but nothing happens.

php hashtag htmlspecialchars

asked Apr 07 '12 at 23:10

Ben

1,906
10
31
47

-1

votes

3 answers

Html special characters in email

I had written a script to read email from a mailbox. in some email i am getting some data being converted into wiered characters that are breaking my further processing. those character looks something like this…

php html email encoding htmlspecialchars

asked Jul 14 '11 at 13:50

Anand

1,670
1
15
23

-1

votes

1 answer

Echo clean text in PHP with htmlspecialchars()

I have a user form where i give the user the possibility to enter a text in a textarea and to change the text later. Here is my example for the HTML textarea:

<?php echo…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/php" class="post-tag grid--cell" title="show questions tagged 'php'" rel="tag">php</a> 
                
                <a href="../../questions/tagged/html" class="post-tag grid--cell" title="show questions tagged 'html'" rel="tag">html</a> 
                
                <a href="../../questions/tagged/textarea" class="post-tag grid--cell" title="show questions tagged 'textarea'" rel="tag">textarea</a> 
                
                <a href="../../questions/tagged/echo" class="post-tag grid--cell" title="show questions tagged 'echo'" rel="tag">echo</a> 
                
                <a href="../../questions/tagged/htmlspecialchars" class="post-tag grid--cell" title="show questions tagged 'htmlspecialchars'" rel="tag">htmlspecialchars</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Feb 24 '21 at 09:36">asked Feb 24 '21 at 09:36</time>
    <a href="../../users/13024256/mischa-milivoje-bakic" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/13024256.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="Mischa Milivoje Bakic" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/13024256/mischa-milivoje-bakic" class="s-user-card--link">Mischa Milivoje Bakic</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">25</li>
            
            
            <li class="s-award-bling s-award-bling__bronze" title="6 bronze badges">6</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-58385532">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>-1</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status ">
                <strong>1</strong> answer
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/58385532/how-do-i-print-and-store-regex-regular-expressions-in-php-and-mysql" class="question-hyperlink">How do I print and store regex (Regular Expressions) in PHP and MYSQL</a></h3>
        <div class="excerpt">I need to be able to store and echo regular expressions. In my case the user enters the regex into a form and that exact sequence of characters needs to be echo-ed to the screen sometime later. The problem is that the echo changes the characters.
So…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/php" class="post-tag grid--cell" title="show questions tagged 'php'" rel="tag">php</a> 
                
                <a href="../../questions/tagged/mysql" class="post-tag grid--cell" title="show questions tagged 'mysql'" rel="tag">mysql</a> 
                
                <a href="../../questions/tagged/html-entities" class="post-tag grid--cell" title="show questions tagged 'html-entities'" rel="tag">html-entities</a> 
                
                <a href="../../questions/tagged/htmlspecialchars" class="post-tag grid--cell" title="show questions tagged 'htmlspecialchars'" rel="tag">htmlspecialchars</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Oct 15 '19 at 00:12">asked Oct 15 '19 at 00:12</time>
    <a href="../../users/2818170/user2818170" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/2818170.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="user2818170" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/2818170/user2818170" class="s-user-card--link">user2818170</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">107</li>
            
            <li class="s-award-bling s-award-bling__silver" title="1 silver badges">1</li>
            <li class="s-award-bling s-award-bling__bronze" title="10 bronze badges">10</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-52695974">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>-1</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status ">
                <strong>1</strong> answer
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/52695974/how-to-secure-a-get-request-and-whole-website" class="question-hyperlink">How to Secure a $_GET Request and whole website</a></h3>
        <div class="excerpt">I have a function called _check_input. Any _GET functions I call, always get parsed into my _check_input function. Is this enough to have a fully secure .php file so I don't get hacked?
function _check_input($string) {

if…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/php" class="post-tag grid--cell" title="show questions tagged 'php'" rel="tag">php</a> 
                
                <a href="../../questions/tagged/security" class="post-tag grid--cell" title="show questions tagged 'security'" rel="tag">security</a> 
                
                <a href="../../questions/tagged/preg-match" class="post-tag grid--cell" title="show questions tagged 'preg-match'" rel="tag">preg-match</a> 
                
                <a href="../../questions/tagged/htmlspecialchars" class="post-tag grid--cell" title="show questions tagged 'htmlspecialchars'" rel="tag">htmlspecialchars</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Oct 08 '18 at 05:38">asked Oct 08 '18 at 05:38</time>
    <a href="../../users/10470639/jackie" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/10470639.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="Jackie" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/10470639/jackie" class="s-user-card--link">Jackie</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">372</li>
            
            <li class="s-award-bling s-award-bling__silver" title="5 silver badges">5</li>
            <li class="s-award-bling s-award-bling__bronze" title="16 bronze badges">16</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-49983535">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>-1</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status answered-accepted">
                <strong>1</strong> answer
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/49983535/when-using-cdata-it-s-not-showing-all-content-and-adding-closing-square-bracke" class="question-hyperlink">When using CDATA it's not showing all content and adding closing square brackets</a></h3>
        <div class="excerpt">Having created an XML feed from an API, I am aware that I have to use CDATA for a couple of the nodes.
Some are working fine and without any issues, though some appear to be missing content and showing ]]> to the end.
$introduction = substr(…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/php" class="post-tag grid--cell" title="show questions tagged 'php'" rel="tag">php</a> 
                
                <a href="../../questions/tagged/xml" class="post-tag grid--cell" title="show questions tagged 'xml'" rel="tag">xml</a> 
                
                <a href="../../questions/tagged/cdata" class="post-tag grid--cell" title="show questions tagged 'cdata'" rel="tag">cdata</a> 
                
                <a href="../../questions/tagged/htmlspecialchars" class="post-tag grid--cell" title="show questions tagged 'htmlspecialchars'" rel="tag">htmlspecialchars</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Apr 23 '18 at 14:22">asked Apr 23 '18 at 14:22</time>
    <a href="../../users/7584883/dave-pearce" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/7584883.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="Dave Pearce" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/7584883/dave-pearce" class="s-user-card--link">Dave Pearce</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">33</li>
            
            
            <li class="s-award-bling s-award-bling__bronze" title="5 bronze badges">5</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>
                
                    <div class="mln24">
                    <div class="question-summary" id="question-summary-46730505">
    <div class="statscontainer">
        <div class="stats">
            <div class="vote">
                <div class="votes">
                    <span class="vote-count-post"><strong>-1</strong></span>
                    <div class="viewcount">votes</div>
                </div>
            </div>

<div class="status answered-accepted">
                <strong>1</strong> answer
            </div>
        </div>
    </div>
    <div class="summary">
        
        <h3><a href="../../questions/46730505/php-highlight-query-and-escape-html-special-characters" class="question-hyperlink">PHP highlight query and escape html special characters</a></h3>
        <div class="excerpt">I'm trying to program a search function that hightlights the search query in the result. At the moment I'm using this Code $hightlight = preg_replace('/'.strtolower($query).'/', '<span class=hightlight>'.strtolower($query).'</span>',…</div>
        <div class="grid ai-start jc-space-between fw-wrap">
            <div class="grid gs4 fw-wrap tags ">
                
                <a href="../../questions/tagged/php" class="post-tag grid--cell" title="show questions tagged 'php'" rel="tag">php</a> 
                
                <a href="../../questions/tagged/html" class="post-tag grid--cell" title="show questions tagged 'html'" rel="tag">html</a> 
                
                <a href="../../questions/tagged/search" class="post-tag grid--cell" title="show questions tagged 'search'" rel="tag">search</a> 
                
                <a href="../../questions/tagged/escaping" class="post-tag grid--cell" title="show questions tagged 'escaping'" rel="tag">escaping</a> 
                
                <a href="../../questions/tagged/htmlspecialchars" class="post-tag grid--cell" title="show questions tagged 'htmlspecialchars'" rel="tag">htmlspecialchars</a> 
                
            </div>
            <div class="started mt0">
                
                    
<div class="s-user-card s-user-card">
    <time class="s-user-card--time" datetime="asked Oct 13 '17 at 12:57">asked Oct 13 '17 at 12:57</time>
    <a href="../../users/6595647/dreide" class="s-avatar s-avatar__32 s-user-card--avatar">
        <img class="s-avatar--image" src="../../users/profiles/6595647.webp" data-jdenticon-width="32" data-jdenticon-height="32" data-jdenticon-value="DreiDe" />
    </a>
    <div class="s-user-card--info">
        <a href="../../users/6595647/dreide" class="s-user-card--link">DreiDe</a>
        <ul class="s-user-card--awards">
            <li class="s-user-card--rep" title="reputation score">109</li>
            
            <li class="s-award-bling s-award-bling__silver" title="1 silver badges">1</li>
            <li class="s-award-bling s-award-bling__bronze" title="10 bronze badges">10</li>
        </ul>
    </div>
</div>

</div>
        </div>
    </div>
</div>
                    </div>

</div>
        </div>

</div>
        </div>
        <script src="../../static/js/stack-icons.js"></script>
        <script src="../../static/js/fromnow.js"></script>
        
    </body>
</html>