Question

I want to display the output of PHP echo statement on the browser. The result is output of
htmlentities() function of PHP.

$str = "A 'quote' is <b>bold</b>";
// Expected Outputs: A 'quote' is &lt;b&gt;bold&lt;/b&gt;
echo "<textarea>".htmlentities($str)."</textarea>";
// Expected Outputs: A &#039;quote&#039; is &lt;b&gt;bold&lt;/b&gt;
echo "<textarea>".htmlentities($str, ENT_QUOTES)."</textarea>";

Apparently, it is giving me

A 'quote' is <b>bold</b> inside my <textarea>

Please advise.

Answer 1

Double-escape it.

echo "<textarea>".htmlentities(htmlentities($str))."</textarea>";

The purpose of htmlentities() is to prevent HTML being parsed as-is. But you actually want to display the HTML entities as-is, so you need to re-escape them in turn.