blocks|key|1368011|text|使用htmlentities|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1368012|<input+value="<?php+echo+htmlentities($value);?>">|code-block|syntax|javascript|1368013|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/htmlentities^0|2|C|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

Use <a href="http://php.net/htmlentities" rel="noreferrer">htmlentities</a>:

<pre><code>&lt;input value="&lt;?php echo htmlentities($value);?&gt;"&gt;
</code></pre>

blocks|key|1368061|text|我猜想你的“文本框”是一个超文本标记语言的<input>元素？|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1368062|如果是这样的话，您将使用如下内容来显示它：|1368063|echo+'<input+name="..."+value="'+.+$yourValue+.+'"+/>';|code-block|syntax|javascript|1368064|如果是这种情况，则需要使用htmlspecialchars转义变量中包含的超文本标记语言|1368065|echo+'<input+name="..."+value="'+.+htmlspecialchars($yourValue)+.+'"+/>';|1368066|请注意，您可能需要添加几个参数，特别是为了指定您正在使用的编码。|1368067|这样，考虑到$yourValue已经像这样初始化了：|1368068|$yourValue+=+'5+"+inches';|1368069|您将从生成的HTML中获得：|1368070|<input+name="..."+value="5+"+inches"+/>|1368071|对于那个，效果要好得多：|1368072|<input+name="..."+value="5+&quot;+inches"+/>|1368073|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/htmlspecialchars^0|L|7|0|0|0|D|G|D|G|0|0|0|0|6|A|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@$9|1D|A|1E|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|1F|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|1G|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1H|8|@$9|1I|A|1J|B|C]]|D|@$9|1K|A|1L|1|1M]]|E|$]]|$1|O|3|P|5|J|7|1N|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|1O|8|@]|D|@]|E|$]]|$1|S|3|T|5|6|7|1P|8|@$9|1Q|A|1R|B|C]]|D|@]|E|$]]|$1|U|3|V|5|J|7|1S|8|@]|D|@]|E|$K|L]]|$1|W|3|X|5|6|7|1T|8|@]|D|@]|E|$]]|$1|Y|3|Z|5|J|7|1U|8|@]|D|@]|E|$K|L]]|$1|10|3|11|5|6|7|1V|8|@]|D|@]|E|$]]|$1|12|3|13|5|J|7|1W|8|@]|D|@]|E|$K|L]]|$1|14|3|-4|5|6|7|1X|8|@]|D|@]|E|$]]]|15|$16|$5|17|18|19|E|$1A|1B]]]]

I suppose your "text box" is an HTML <code>&lt;input&gt;</code> element?

If so, you are displaying it using something like this:

<pre><code>echo '&lt;input name="..." value="' . $yourValue . '" /&gt;';
</code></pre>

If it's the case, you need to escape the HTML that's contained in your variable, with <a href="http://www.php.net/htmlspecialchars" rel="nofollow noreferrer"><code>htmlspecialchars</code></a>:

<pre><code>echo '&lt;input name="..." value="' . htmlspecialchars($yourValue) . '" /&gt;';
</code></pre>

Note that you might have to add a couple of parameters, especially to specify the encoding your are using.

 
This way, considering <code>$yourValue</code> has been initialized like this :

<pre><code>$yourValue = '5 " inches';
</code></pre>

You'll get from this generated HTML:

<pre><code>&lt;input name="..." value="5 " inches" /&gt;
</code></pre>

To that one, which works much better:

<pre><code>&lt;input name="..." value="5 &amp;quot; inches" /&gt;
</code></pre>

blocks|key|1368274|text|对于UTF-8，我选择了htmlspecialchars($value,+ENT_QUOTES,+"UTF-8")，它做到了这一点。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1368275|stack+source|1368276|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/5679795/1066234^0|C|19|0|0|C|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@$9|T|A|U|1|V]]|E|$]]|$1|H|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|O]]]]

For UTF-8 I went for <code>htmlspecialchars($value, ENT_QUOTES, "UTF-8")</code> which did the trick. 

<a href="https://stackoverflow.com/a/5679795/1066234">stack source</a>

blocks|key|1368160|text|我发现如果你在JavaScript中的变量中有双引号(来自Ajax/数据库之类的)，并且你想把它放在一个字段中--如果你构建整个字段/表单HTML内容，然后使用innerHTML将其交换到一个div中，那么值中的双引号将会导致问题。我正在做这件事，但我也想不出逃脱的办法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1368161|你应该用字段构建HTML内容，并首先交换它，然后执行一个document.getElementById('myfieldid').value+=+the+.value；，这样就可以正常工作了。|1368162|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

I've found if you have double quotes in a variable in JavaScript (from Ajax/database whatever) and you want to put it in a field - if you build the whole field/form HTML content and then swap that into a div using innerHTML, the double quotes in the value will cause problems. I was doing this and I couldn't figure a way around it by escaping either.

You should build the HTML content with the field and swap it in first, and then do a document.getElementById('myfieldid').value = thevalue; instead and it works fine.

blocks|key|1153126|text|我需要将htmlspecialcars()应用于查询结果数组。我找到了a+useful+solution+from+here+(参见sean的评论)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1153127|//+Create+a+cleaning+function
function+_clean(&$value)+{
++$value+=+htmlspecialchars($value);
++//$value+=+htmlspecialchars($value,+ENT_QUOTES);+//+Alternative
}

//+Fetch+the+data+from+DB+somehow+(sqlQ+is+a+custom+function)
$q+=+"...";
$r+=+$d->sqlQ($q);
$row+=+mysqli_fetch_array($r,+MYSQLI_ASSOC);

//...call+the+function+recursively+(not+always+necessary)+to+the+resultset+row
array_walk_recursive($row,+'_clean');|code-block|syntax|javascript|1153128|如果您只获取几个文本列，它会做一些不必要的工作，但至少您不需要向HTML表单多次编写htmlspecialchars()函数。|1153129|entityMap|0|LINK|mutability|MUTABLE|url|http://www.hawkee.com/snippet/8641/^0|4|H|Z|R|0|0|0|16|I|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|G|5|H|7|10|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|M|3|-4|5|6|7|14|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

I needed to apply <code>htmlspecialcars()</code> to the query result array. I found <a href="http://www.hawkee.com/snippet/8641/" rel="nofollow noreferrer">a useful solution from here</a> (see the comment by sean).

<pre><code>// Create a cleaning function
function _clean(&amp;$value) {
 $value = htmlspecialchars($value);
 //$value = htmlspecialchars($value, ENT_QUOTES); // Alternative
}

// Fetch the data from DB somehow (sqlQ is a custom function)
$q = "...";
$r = $d-&gt;sqlQ($q);
$row = mysqli_fetch_array($r, MYSQLI_ASSOC);

//...call the function recursively (not always necessary) to the resultset row
array_walk_recursive($row, '_clean');
</code></pre>

It does quite a bit unnecessary work if you fetch only a few text columns, but at least you don't need to write the <code>htmlspecialchars()</code> function to the HTML form multiple times.

blocks|key|1368098|text|尝尝这个|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1368099|+echo+'<input+name="..."+value="'+.+htmlspecialchars(stripslashes($yourValue))+.+'"+/>';|code-block|syntax|javascript|1368100|或|1368101|<input+name="..."+value="<?php+echo+htmlspecialchars(stripslashes($value));+?>">|1368102|祝你好运;)|1368103|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Try this

<pre><code> echo '&lt;input name="..." value="' . htmlspecialchars(stripslashes($yourValue)) . '" /&gt;';
</code></pre>

or

<pre><code>&lt;input name="..." value="&lt;?php echo htmlspecialchars(stripslashes($value)); ?&gt;"&gt;
</code></pre>

Good luck ;)

blocks|key|1153090|text|就我个人而言，我使用这个技巧：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1153091|$s+=+str_replace("&+amp+;",+"&",+(htmlentities(stripslashes($s),+ENT_QUOTES,+'UTF-8')));|code-block|syntax|javascript|1153092|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Personally, I use this trick:

<pre><code>$s = str_replace("&amp; amp ;", "&amp;", (htmlentities(stripslashes($s), ENT_QUOTES, 'UTF-8')));
</code></pre>

In my PHP project I have a value containing special characters like ",', etc. (" 5 " inches, '3.5' inches, etc.). But it does not appear in a text field. How can I display this?

Is it possible to display this value in a text box?

Input field containing double quotes value

数据库

在我的PHP项目中，我有一个包含"，‘等特殊字符的值(“5”英寸，“3.5”英寸等)。但它不会出现在文本字段中。我如何显示它？是否可以在文本框中显示此值？

问包含双引号的输入字段
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问包含双引号的输入字段EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问包含双引号的输入字段
EN