12 lines
400 B
PHP
12 lines
400 B
PHP
<?php
|
|
// Escape plain text for HTML (existing entities such as … are kept)
|
|
function h($string) {
|
|
return htmlspecialchars((string)$string, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8', FALSE);
|
|
}
|
|
|
|
// Escape a raw value for an attribute or a textarea, so that it comes back unchanged
|
|
function form_value($string) {
|
|
return htmlspecialchars((string)$string, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
|
|
}
|
|
?>
|