Answer
htmlentities() converts all applicable characters to HTML entities, preventing XSS attacks.
Quick Answer
htmlentities() converts special characters to HTML entities to prevent XSS attacks. < becomes < > becomes > and & becomes &. Always encode user-provided data before outputting it in HTML. htmlspecialchars() is the lighter version that only converts the five critical characters. Use ENT_QUOTES flag to also encode single quotes.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ