I have project of create something like blog. The problem am facing now.
- trying to post articles within there are php, html code and contain some character keep failed.
- later on  it try to use htmlspecialchars($_POST['body']). it change but in frontend the results isdont ' me i s't (opsdd) <====> saya whatis ? ! ---
My code:
session_start();
include('../../conn/connect.php');
if (isset($_POST["submit"])) {
    $for_query = '';
    if (!empty($_POST["sub"])) {
        $subject = $_POST['subject'];
        $body = htmlspecialchars($_POST['body']);
        $menu = $_POST['menu'];
        foreach ($_POST["sub"] as $language) {
            $for_query .= $language . ',';
        }
        $year = date("Y");
        foreach ($_FILES['file']['name'] as $key => $name) {
            $size = $_FILES['file']['size'][$key];
            $file = $_FILES['file']['name'][$key];
            $extension = explode('.', $name);
            $extension = end($extension);
            $extension = strtolower($extension);
            $random_name = rand();
            $images = $subject . "." . $extension;
            $save =  $_SESSION['folder'] . '/' . $images;
            $url = $images;
            if (
                $_FILES['file']['error'][$key] == 0 &&
                move_uploaded_file($_FILES['file']['tmp_name'][$key], "../users/{$_SESSION['folder']}/{$images}")
            ) {
                $uploaded[]=$images;
                $for_query = substr($for_query, 0, -2);
                $query = "INSERT INTO content (subject,body,menu,sub,files) VALUES ('$subject','$body','$menu','$for_query','$save')";
                $q = $db->prepare($query);
                $q->execute();
            } else {
            echo "<label class='text-danger'>* Please Select Atleast one</label>";
            }
        }
    }
}
 
    