Home/ Questions/Q 1115513
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-17T03:10:00+00:00

I have a text box like , <!–<input type=text maxlength=255 name=$key value=<?php echo $value;?>

  • 0

I have a text box like ,

<!--<input type="text"  maxlength="255" name="$key" value="<?php echo $value;?>"  />-->

$value is b’bbb”bbb

But it only shows b’bbb as value.Can any1 help ???

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Properly escape your data that should be displayed unparsed in HTML using htmlentities():

    <input type="text"  maxlength="255" name="<?php echo htmlentities($key);?>" value="<?php echo htmlentities($value);?>"  />

    The quote char (") is breaking your code. It could get more dangerous if you’ve a $value like "><script>alert("xss")</script> (it’s called XSS and will pop up an alert box with “xss”)

    • 0