很多朋友在写php的时候,难免会遇到需要将html标签进行转义存储。比如存入数据库、xml文件等。而存储进去后,读取出来则需要转换成html输出。网上有许多人编写的转换函数,很长很难懂。其实php早就自带有这样的函数。大可不必自己编写。
下面分别介绍这两个函数。
1.htmlentities()函数:
说明:将html标签转换成特殊字符。例如将<script>转换成"<script>"
例子:
[PHP] view plaincopy
- // An imaginary article submission from a bad user
- // it will redirect anyone to example.com if the code is run in a browser
- $userInput = "I am going to hax0r your site, hahaha!
- <script type='text/javascript'>
- window.location = 'http://www.example.com/'
- </script>'";
- //Lets make it safer before we use it
- $userInputEntities = htmlentities($userInput);
- //Now we can display it
- echo $userInputEntities;
由于最近csdn的控件比较垃圾,请将上面的$apos改成单引号。---呼!
上面的语句执行后,将生成下面的结果
[HTML] view plaincopy
- I am going to hax0r your site, hahaha!
- <script type='text/javascript'>
- window.location = 'http://www.88web.org/'
- </script>'
2.html_entity_decode()函数
说明:将htmlentities()函数转义过的字符串转成html标签。
例子:
[PHP] view plaincopy
- $orig = "I'll /"walk/" the <b>dog</b> now";
- $a = htmlentities($orig);
- $b = html_entity_decode($a);
- echo $a; // I will "walk" the <b>dog</b> now
- echo $b; // I will "walk" the <b>dog</b> now
转载自:http://blog.sina.com.cn/s/blog_a144530d0101d6li.html
时间: 2024-10-08 12:20:35