Question

I have in my control panel ( HTML template editor )

<?
$textarea = '<textarea>';
$textarea .= $template_code;
$textarea .= '</textarea>';
echo $textarea;
?>

The variable $template_code contains html, including </textarea>

for example -> $template_code = '</textarea> ......';

This means the variable will close my textarea and other code will be outside my real textarea!!

How i can avoid this?

Answer 1

use htmlentities to escape the special characters.

echo '<textarea>'.htmlentities($template_code).'</textarea>';