Htmlspecialchars to display html tags on page

Read this line below, we want to display the formatting of this line.

Hello this is bold This is italic This is normal this is a double quote " this is & this is less than < this is greater than >

The html part of the above line is here

<b>Hello this is bold</b> <i>This is italic</i> This is normal 
this is a double quote " this is & this is less than < this is greater than  >

Now to display the code for the above line formatted in different style we have to use htmlspecialchars() function like this


$contents="<b>Hello this is bold</b> <i>This is italic</i> This is normal this is a double quote " this is & this is less than < this is greater than  >";
 
echo htmlspecialchars($content);

We can display some special chars especially html tags on the screen by using htmlspecialchars function of PHP. This is required when we have to show some sample codes on the page or screen. For example I want to display this line

if ($i < 5 )

Here we can't write < as it is , in this place I have to write < then while displaying this will display < on the screen. Same way some other chars are there which are to be written in different way or special care to be taken for displaying them. All these jobs can be done by using htmlspecialchars function.

This function takes care of &, < ( less than ), > ( greater than ), " double quote ( if ENT_NOQUOTES is not set. ) and single quote (only when ENT_QUOTES is set). Single quote became ' and double quote became ". Same way < ( less than ) became < and > ( greater than ) became >

Example: Securing User Input ( view source )

$input = "<script>alert('XSS');</script>";
$sanitized_input = htmlspecialchars($input);
echo $sanitized_input;  // Output: <script>alert('XSS');</script>

Example: Handling Special Characters

$str = 'Hello & welcome!';
echo htmlspecialchars($str);  // Output: Hello & welcome!

Example: Comparing htmlspecialchars() and htmlentities()

$str = '© 2023 Plus2Net';
echo htmlspecialchars($str);  // Output: © 2023 Plus2Net
echo htmlentities($str);  // Output: © 2023 Plus2Net

These examples improve the explanation and show practical uses for securing input and understanding the function's behavior in different cases.

htmlspecialchar is used to generate html code for web pages
String Functions Remove HTML tags

Subhendu Mohapatra

Author

🎥 Join me live on YouTube

Passionate about coding and teaching, I publish practical tutorials on PHP, Python, JavaScript, SQL, and web development. My goal is to make learning simple, engaging, and project‑oriented with real examples and source code.

Subscribe to our YouTube Channel here

webchecker	17-02-2010
very good explanation, thank you

HTML tags to print on page by htmlspecialchars function

Example: Securing User Input ( view source )

Example: Handling Special Characters

Example: Comparing htmlspecialchars() and htmlentities()

Subhendu Mohapatra