PHP XSS: htmlspecialchars vs. htmlentities

Cross site scripting XSS is a term used to refer attacks or loop holes present in the scripting used by websites favoring hackers to exploit this path towards identity theft or phishing. In PHP, two functions are mainly used to circumvent XSS attacks. i) htmlspecialchars ii) htmlentities (more…)