Question

i have the following code :

 <input type="text" value="<?php echo $_GET['msg']; ?>">

This input is automatically filled with the name that is writen in the previous page.
So, if the user wrote : i like “apples” and banana
The input will be broken because it will close the tag after the double quotes.
I know i can avoid that by html entiting the value, but i don’t want this, is there another solution or is there an <<< EOD in html ?

Thanks

Answer 1

htmlentities() / htmlspecialchars() is the standard way for this. You should use it.

You can always decode the entities before you send them by E-Mail, or do something else with them using html_entity_decode().