Html encode in PHP

Question

What is the easiest way to Html encode in PHP?

I think he means the php equivalent to the ASP.NET method "htmlencode". It is used to sanatize the input by replacing characters like '<' with <. He doesn't want to strip them away. — , Sep 23 '10 at 23:40

Vallières · Accepted Answer · 2017-08-25T18:59:54.183

57

By encode, do you mean: Convert all applicable characters to HTML entities?

htmlspecialchars or htmlentities

You can also use strip_tags if you want to remove all HTML tags :

strip_tags

Note: this will NOT stop all XSS attacks

edited Aug 25 '17 at 18:59

answered Dec 09 '09 at 13:16

Vallières

1,409
13
17

1

I am not shure which I have to use. I need this to avoid XSS-atacks. – Mathias F Dec 09 '09 at 13:23
2

Then htmlspecialchars should do the trick. Or use filter_var with the FILTER_SANITIZE_SPECIAL_CHARS filter. – Arkh Dec 09 '09 at 13:28
11

`htmlspecialchars` > `htmlentities` in most cases. HTML entities for non-ASCII characters should be a thing of the past; just use UTF-8 and drop the characters straight in. – bobince Dec 09 '09 at 14:55
priority will be for htmlspecialchars in php – Moby M Jul 18 '17 at 12:05

score 5 · Answer 2 · answered Apr 25 '15 at 04:28

Encode.php

<h1>Encode HTML CODE</h1>

<form action='htmlencodeoutput.php' method='post'>
<textarea rows='30' cols='100'name='inputval'></textarea>
<input type='submit'>
</form>

htmlencodeoutput.php

<?php

$code=bin2hex($_POST['inputval']); 
$spilt=chunk_split($code,2,"%");
$totallen=strlen($spilt);
 $sublen=$totallen-1;
 $fianlop=substr($spilt,'0', $sublen);
$output="<script>
document.write(unescape('%$fianlop'));
</script>";

?> 
<textarea rows='20' cols='100'><?php echo $output?> </textarea>

You can encode HTML like this .

score 2 · Answer 3 · edited Jul 18 '17 at 21:03

2

Try this:

<?php
    $str = "This is some <b>bold</b> text.";
    echo htmlspecialchars($str);
?>

edited Jul 18 '17 at 21:03

Nisse Engström

4,738
23
27
42

answered Jul 18 '17 at 12:01

Moby M

910
2
7
26

2

Why "try this"? This is not a very generous/informative answer. – mickmackusa Oct 05 '21 at 01:55

score 1 · Answer 4 · answered Jan 18 '19 at 16:21

I searched for hours, and I tried almost everything suggested.
This worked for almost every entity :

$input = "āžšķūņrūķīš ○ àéò ∀∂∋ ©€ ♣♦ ↠ ↔↛ ↙ ℜ℞";


echo htmlentities($input, ENT_HTML5  , 'UTF-8');

result :

&amacr;&zcaron;&scaron;&kcedil;&umacr;&ncedil;r&umacr;&kcedil;&imacr;&scaron; &cir; &agrave;&eacute;&ograve; &forall;&part;&ReverseElement; &copy;&euro; &clubs;&diamondsuit; &twoheadrightarrow; &harr;&nrarr; &swarr; &Rfr;&rx;rx;

Html encode in PHP

4 Answers4

Linked