How can I properly escape HTML form input default values in PHP?

by

Use htmlspecialchars($_POST['firstname']) and htmlspecialchars($_POST['content']).

Always escape strings with htmlspecialchars() before showing them to the user.

More Related Contents:

  1. Syntax error unexpected '<' [duplicate]
  2. HTML Form/PHP connected but MySQL is empty
  3. xss attack on a php page
  4. PHP Upload fails for Video but not Image [closed]
  5. w3 schools form tutorial doesnt send email
  6. (PHP) Warning: file_get_contents() [function.file-get-contents]: couldn’t resolve host name
  7. Get $_POST from multiple checkboxes
  8. Multiple inputs with same name through POST in php
  9. How to read if a checkbox is checked in PHP?
  10. method=”post” enctype=”text/plain” are not compatible?
  11. Understanding the “post/redirect/get” pattern
  12. HTML input arrays
  13. POST an array from an HTML form without javascript [duplicate]
  14. Best way to avoid the submit due to a refresh of the page
  15. Submit an HTML form with empty checkboxes
  16. PHP POST not working
  17. How to prevent multiple inserts when submitting a form in PHP?
  18. How to add a delete button to a PHP form that will delete a row from a MySQL table
  19. PHP form – on submit stay on same page
  20. Why is textarea filled with mysterious white spaces?
  21. CodeIgniter – why use xss_clean
  22. getting a checkbox array value from POST
  23. Storing Form Data as a Session Variable
  24. GET vs. POST Best Practices
  25. How to place two forms on the same page?
  26. PHP $_POST not working? [duplicate]
  27. Parsing multipart form data
  28. Simple form not sending data via _POST [duplicate]
  29. navigate back with PHP form submission
  30. HTML form PHP post to self to validate or submit to new page

Leave a Comment