Question

How to convert characters to HTML entities to prevent code injecting attack in PHP

Answer 1

$s = htmlspecialchars("<a href='test.php'>Test</a>");
print $s; 

/*
run:

&lt;a href='test.php'&gt;Test&lt;/a&gt;
 
*/

 

70+ SQL courses for beginners and professionals

Answer 2

<form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">

 

70+ SQL courses for beginners and professionals