mattattui/gist:879294

Created March 21, 2011 10:54

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/mattattui/879294.js"></script>
Save mattattui/879294 to your computer and use it in GitHub Desktop.

Download ZIP

Escaping PHP output

Raw

gistfile1.aw

	Instead of:

	<?php echo $name; ?>


	Use:

	<?php echo htmlspecialchars($name, ENT_NOQUOTES, 'UTF-8'); ?>

Author

mattattui commented Mar 21, 2011

See http://inanimatt.com/php-output-escaping.php

Obviously if you're outputting to a page that isn't UTF-8, then change the last argument to whatever's appropriate. If you miss it out, PHP assumes ISO-8859-1 (strictly speaking, Windows-1252).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment