PHP: Difference between revisions

@@ Line 23: / Line 23: @@
   <nowiki></p></nowiki>
-Note that if you're rendering user input in this way, you should wrap it in the <code>[https://www.php.net/manual/en/function.strip-tags.php strip_tags]</code> function, lest you become vulnerable to an [[wikipedia:Cross-site_scripting|XSS (Cross-site scripting)]] attack in which a nasty fellow inputs evil HTML to make your site go bad and rotten like a hard-boiled egg.
+Note that if you're rendering user input in this way, you should wrap it in the <code>[https://www.php.net/manual/en/function.htmlspecialchars.php htmlspecialchars]</code> function, lest you become vulnerable to an [[wikipedia:Cross-site_scripting|XSS (Cross-site scripting)]] attack in which a nasty fellow inputs evil HTML to make your site go bad and rotten like a hard-boiled egg.
 [[Category:Pages with some amount of information in them]]