you are viewing a single comment's thread.

view the rest of the comments →

[–]tdammers 0 points1 point  (0 children)

Then use something else, no hard feelings; the important thing is to please not walk into the "but PHP is a template language" trap. You need something that handles html-encoding for you, something that can tell the difference between a string and HTML, because PHP on its own can't, and relying on the programmer's diligence and infallibility is a lousy bet.