Confused when to use extra characters and when to use htmlentities

Question

Possible duplicates:
Htmlentities vs addslashes vs mysqli_real_escape_string
When to use the line erase method?

Hi, I am very confused when I use addlashes and when to use htmlentities.

Could you tell me an example where I should use addlashes and when to use htmlentities.

+3

Hacker May 04 '11 at 10:34

2 answers

, . , :)

htmlentities HTML-. PHP .

htmlspecialchars() , htmlentities(), , HTML, .

addslashes , , MySQL (mysql_real_escape_string)

+2

James 04 '11 10:37

Pekka 웃 · Accepted Answer · 2011-05-04T10:37:02+0000

Never use addlashes.
Also never use htmlentities() ^*
Use htmlspecialchars()when displaying untrusted content in the context of an HTML page.

, / , . , , - .

_{^*= , . htmlentities() , , HTML, UTF-8. , htmlspecialchars(), . >}