/ Published in: PHP
To avoid script injection attacks an input value requires proper escaping.
Expand |
Embed | Plain Text
Copy this code and paste it in your HTML
# turn off global magic quotes in .htaccess php_flag magic_quotes_gpc Off # in your smarty template... <input type="text" value="{$some_user_input|escape:'htmlall'}">