Question

I am trying to make a variable which contains some HTML tags, this isn’t working like I want it to. I was hoping someone could tell what I am doing wrong here.

My Code:

$foto = "put picture here";
$naam = 'Sieraad1';
$prijs = '20,00';

$artikel = '<img src="'$foto'"><h4>'$naam'</h4><h6>€'$prijs'</h6>';

echo '<table><tr><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td></tr>';
echo '<table><tr><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td><td>'.htmlspecialchars(stripslashes($artikel)).'</td></tr>';
echo '</table>';

Answer 1

Using htmlspecialchars on html code will convert < to <, > to > and " to ". So it will obviously break your code. Run the htmlspecialchars on the inner contents instead:

$artikel = '<img src="' . htmlspecialchars($foto) . '"><h4>' . htmlspecialchars($naam) . '</h4><h8>€' . htmlspecialchars($prijs) . '</h8>';
echo '<table><tr><td>'.$artikel.'</td>...';