Note, that this function currently only escapes ISO-8859-1 (or ISO-latin-1) charset.
Currently, if you don't know what you are really doing, you should try to avoid to use this function.
You *cannot* rely on that the input an user sends you from his browser is ISO-latin-1.
E.g. a user inputs in his charset
a hebrew letter, which has in his charset the same ascii-value as Ä in ISO-latin-1, then this function will convert
it to Ä. [Reminds us to the old DOS-Days where a DOS-Ä looks like a §$'#& under Unix. :-] There is no easy way to convert
this entity back to the correct entity, even if you know the charset, the user has used, cause you
don't know if the user hasn't really meant an Ä and not his hebrew counterpart.
So it is *not quite correct* to use this function as a superior replacement for
things, where HTMLSpecialChars(); is enough, cause you assume, that every instance uses ISO-latin-1.
|
Manual: htmlentities
