PHP：MySQL的返回值「逃逸」的textarea

如果MySQL查詢的返回值包含""和/的內容顯示在textarea的PHP：MySQL的返回值「逃逸」的textarea

content = <a href="url">link</a>

echo()是textarea的內部使用外

<textarea><?php echo $row['value']; ?></textarea>

textarea顯示<a href=，接下來它顯示在textarea外

How包含textarea中的所有html？

來源

2010-09-25 Zebra

htmlspecialchars($row['value'])

來源

2010-09-25 17:28:44 Quentin

Dorwad，非常感謝！ – Zebra 2010-09-25 17:38:37

@dany：請注意，每次將文本放入HTML元素和屬性值時，都必須使用'htmlspecialchars（）'*，而不僅僅是在''中。如果您在不轉義的情況下允許不受信任的內容進入您的HTML，您將會遇到跨站點腳本安全漏洞。 – <span class="text-secondary"> <small> <a rel="noopener" target="_blank" href="https://stackoverflow.com/users/18936/">bobince</a></span> <span>2010-09-28 10:17:06</span> </small> </span> </p> </div> </div> </div> </div> </div> </article> <div> <script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-6208739752673518" data-ad-slot="4319274062" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="clearfix"> </div> <div class="relative-box"> <div class="relative">相關問題</div> <ul class="relative_list"> <li> 1. <a href="http://hk.voidcc.com/question/p-bhsogvqr-og.html" target="_blank" title="逃逸「價值」"> 逃逸「價值」 </a> </li> <li> 2. <a href="http://hk.voidcc.com/question/p-odfofzps-hw.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li> 3. <a href="http://hk.voidcc.com/question/p-blmvzocz-ke.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li> 4. <a href="http://hk.voidcc.com/question/p-fssviywp-ds.html" target="_blank" title="回聲，殼逃逸參數"> 回聲，殼逃逸參數 </a> </li> <li> 5. <a href="http://hk.voidcc.com/question/p-agvbwoer-ts.html" target="_blank" title="逃逸報價PHP回聲"> 逃逸報價PHP回聲 </a> </li> <li> 6. <a href="http://hk.voidcc.com/question/p-azzczduq-gy.html" target="_blank" title="逃逸PHP GET和POST值"> 逃逸PHP GET和POST值 </a> </li> <li> 7. <a href="http://hk.voidcc.com/question/p-mnvoebsq-qy.html" target="_blank" title="PHP的sprintf逃逸％"> PHP的sprintf逃逸％ </a> </li> <li> 8. <a href="http://hk.voidcc.com/question/p-feohyign-mq.html" target="_blank" title="LoadRunner的VUGEN逃逸"> LoadRunner的VUGEN逃逸 </a> </li> <li> 9. <a href="http://hk.voidcc.com/question/p-asztsckd-rx.html" target="_blank" title="逃逸「[」從JSON"> 逃逸「[」從JSON </a> </li> <li> 10. <a href="http://hk.voidcc.com/question/p-nmljnuzr-ma.html" target="_blank" title="逃逸在PHP"> 逃逸在PHP </a> </li> <li> 11. <a href="http://hk.voidcc.com/question/p-akiwynfj-pc.html" target="_blank" title="逃逸的Json在MVC2"> 逃逸的Json在MVC2 </a> </li> <li> 12. <a href="http://hk.voidcc.com/question/p-zklstraf-s.html" target="_blank" title="逃逸冒號"> 逃逸冒號 </a> </li> <li> 13. <a href="http://hk.voidcc.com/question/p-adbfswcf-y.html" target="_blank" title="逃逸問題"> 逃逸問題 </a> </li> <li> 14. <a href="http://hk.voidcc.com/question/p-cxayfqth-sg.html" target="_blank" title="HTML逃逸"> HTML逃逸 </a> </li> <li> 15. <a href="http://hk.voidcc.com/question/p-hrsnqlnw-hy.html" target="_blank" title="HTML屬性逃逸"> HTML屬性逃逸 </a> </li> <li> 16. <a href="http://hk.voidcc.com/question/p-ygzswilb-qw.html" target="_blank" title="的Lua的String.format逃逸"> 的Lua的String.format逃逸 </a> </li> <li> 17. <a href="http://hk.voidcc.com/question/p-pkbbeapb-ko.html" target="_blank" title="Hash.from_xml雙逃逸&"> Hash.from_xml雙逃逸& </a> </li> <li> 18. <a href="http://hk.voidcc.com/question/p-bmjqoppt-st.html" target="_blank" title="逃逸的String.Format佔位"> 逃逸的String.Format佔位 </a> </li> <li> 19. <a href="http://hk.voidcc.com/question/p-mhnhcqlq-mw.html" target="_blank" title="的String.Format逃逸VB VS C＃"> 的String.Format逃逸VB VS C＃ </a> </li> <li> 20. <a href="http://hk.voidcc.com/question/p-rrttskdw-uw.html" target="_blank" title="Java的逃逸參考「這」"> Java的逃逸參考「這」 </a> </li> <li> 21. <a href="http://hk.voidcc.com/question/p-rzpxrvzv-vm.html" target="_blank" title="逃逸sqlite的結果"> 逃逸sqlite的結果 </a> </li> <li> 22. <a href="http://hk.voidcc.com/question/p-umgwdclg-ub.html" target="_blank" title="玉逃逸的問題？"> 玉逃逸的問題？ </a> </li> <li> 23. <a href="http://hk.voidcc.com/question/p-silvxhtc-kx.html" target="_blank" title="在Access逃逸「SQL"> 在Access逃逸「SQL </a> </li> <li> 24. <a href="http://hk.voidcc.com/question/p-gobpqlli-ug.html" target="_blank" title="$ _ POST逃逸」，在PHP"> $ _ POST逃逸」，在PHP </a> </li> <li> 25. <a href="http://hk.voidcc.com/question/p-tiqnfsbb-gg.html" target="_blank" title="逃逸@使用AWK"> 逃逸@使用AWK </a> </li> <li> 26. <a href="http://hk.voidcc.com/question/p-hszerzzv-ns.html" target="_blank" title="addcslashes逃逸大寫字母"> addcslashes逃逸大寫字母 </a> </li> <li> 27. <a href="http://hk.voidcc.com/question/p-nsagqeri-kq.html" target="_blank" title="單引號逃逸參數"> 單引號逃逸參數 </a> </li> <li> 28. <a href="http://hk.voidcc.com/question/p-rerwwwdz-su.html" target="_blank" title="逃逸空白的Android的strings.xml"> 逃逸空白的Android的strings.xml </a> </li> <li> 29. <a href="http://hk.voidcc.com/question/p-ffsxlbgt-vh.html" target="_blank" title="request_param在Smarty的模板逃逸"> request_param在Smarty的模板逃逸 </a> </li> <li> 30. <a href="http://hk.voidcc.com/question/p-enapqoda-mu.html" target="_blank" title="逃逸「=>」在捻模板"> 逃逸「=>」在捻模板 </a> </li> </ul> </div> <div> <script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block" data-ad-format="autorelaxed" data-ad-client="ca-pub-6208739752673518" data-ad-slot="3534119089"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> <div class="padding-top-10"></div> </div> </div> <script type="text/javascript" src="http://img2.voidcc.com/voidso/script/side.js?t=1652515421930"></script> <script type="text/javascript" src="http://img2.voidcc.com/voidso/plugin/highlight/highlight.pack.js"></script> <link href="http://img2.voidcc.com/voidso/plugin/highlight/styles/docco.css" media="screen" rel="stylesheet" type="text/css" /> <script type="text/javascript"> $('pre').each(function(i, e) { hljs.highlightBlock(e, "<span class='indent'> </span>", false) }); </script> <div class="col-lg-3 col-md-4 col-sm-5"> <div id="rightTop"> <div class="row"> <script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>  <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-6208739752673518" data-ad-slot="3862022848" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> <div class="row sidebar panel panel-default"> <div class="panel-heading font-bold"> 最新問題 </div> <div class="m-b-sm m-t-sm clearfix"> <ul class="side_article_list"> <li class="side_article_list_item"> 1. <a href="http://hk.voidcc.com/question/p-vyinlzjb-bkb.html" target="_blank" title="Stata：從一堆副本中，保留一個特定的副本"> Stata：從一堆副本中，保留一個特定的副本 </a> </li> <li class="side_article_list_item"> 2. <a href="http://hk.voidcc.com/question/p-whryiawq-vb.html" target="_blank" title="如果語句不適用於循環"> 如果語句不適用於循環 </a> </li> <li class="side_article_list_item"> 3. <a href="http://hk.voidcc.com/question/p-yhidfvjb-vc.html" target="_blank" title="在正數變化前增加+符號"> 在正數變化前增加+符號 </a> </li> <li class="side_article_list_item"> 4. <a href="http://hk.voidcc.com/question/p-nxarfsre-vc.html" target="_blank" title="將OptimisticLockPolicy更改爲使用本地時間"> 將OptimisticLockPolicy更改爲使用本地時間 </a> </li> <li class="side_article_list_item"> 5. <a href="http://hk.voidcc.com/question/p-xymxnska-ve.html" target="_blank" title="ASP.NET核心身份到期（谷歌OAuth）"> ASP.NET核心身份到期（谷歌OAuth） </a> </li> <li class="side_article_list_item"> 6. <a href="http://hk.voidcc.com/question/p-mmgepyju-vd.html" target="_blank" title="D3在直線邊緣和多個曲線邊緣之間切換"> D3在直線邊緣和多個曲線邊緣之間切換 </a> </li> <li class="side_article_list_item"> 7. <a href="http://hk.voidcc.com/question/p-hqegqxbd-up.html" target="_blank" title="一旦某件事情完成，我該如何完全停止代碼？"> 一旦某件事情完成，我該如何完全停止代碼？ </a> </li> <li class="side_article_list_item"> 8. <a href="http://hk.voidcc.com/question/p-djchwbxf-bkx.html" target="_blank" title="Android - 有效的性能和內存管理"> Android - 有效的性能和內存管理 </a> </li> <li class="side_article_list_item"> 9. <a href="http://hk.voidcc.com/question/p-gjwcsggs-bho.html" target="_blank" title="ByteArrayOutputStream的RAM內存的Extream使用"> ByteArrayOutputStream的RAM內存的Extream使用 </a> </li> <li class="side_article_list_item"> 10. <a href="http://hk.voidcc.com/question/p-wyzbjpbz-bkk.html" target="_blank" title="不能使用線程構造函數"> 不能使用線程構造函數 </a> </li> </ul> </div> </div> </div> <p class="article-nav-bar"></p> <div class="row sidebar article-nav"> <div class="row box_white visible-sm visible-md visible-lg margin-zero"> <div class="top"> <h3 class="title"><i class="glyphicon glyphicon-th-list"></i> 相關問題</h3> </div> <div class="article-relative-content"> <ul class="side_article_list"> <li class="side_article_list_item"> 1. <a href="http://hk.voidcc.com/question/p-bhsogvqr-og.html" target="_blank" title="逃逸「價值」"> 逃逸「價值」 </a> </li> <li class="side_article_list_item"> 2. <a href="http://hk.voidcc.com/question/p-odfofzps-hw.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li class="side_article_list_item"> 3. <a href="http://hk.voidcc.com/question/p-blmvzocz-ke.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li class="side_article_list_item"> 4. <a href="http://hk.voidcc.com/question/p-fssviywp-ds.html" target="_blank" title="回聲，殼逃逸參數"> 回聲，殼逃逸參數 </a> </li> <li class="side_article_list_item"> 5. <a href="http://hk.voidcc.com/question/p-agvbwoer-ts.html" target="_blank" title="逃逸報價PHP回聲"> 逃逸報價PHP回聲 </a> </li> <li class="side_article_list_item"> 6. <a href="http://hk.voidcc.com/question/p-azzczduq-gy.html" target="_blank" title="逃逸PHP GET和POST值"> 逃逸PHP GET和POST值 </a> </li> <li class="side_article_list_item"> 7. <a href="http://hk.voidcc.com/question/p-mnvoebsq-qy.html" target="_blank" title="PHP的sprintf逃逸％"> PHP的sprintf逃逸％ </a> </li> <li class="side_article_list_item"> 8. <a href="http://hk.voidcc.com/question/p-feohyign-mq.html" target="_blank" title="LoadRunner的VUGEN逃逸"> LoadRunner的VUGEN逃逸 </a> </li> <li class="side_article_list_item"> 9. <a href="http://hk.voidcc.com/question/p-asztsckd-rx.html" target="_blank" title="逃逸「[」從JSON"> 逃逸「[」從JSON </a> </li> <li class="side_article_list_item"> 10. <a href="http://hk.voidcc.com/question/p-nmljnuzr-ma.html" target="_blank" title="逃逸在PHP"> 逃逸在PHP </a> </li> </ul> </div> </div> </div> </div> </div> </div> </div>  <footer id="footer"> <div class="bg-simple lt"> <div class="container"> <div class="row padder-v m-t"> <div class="col-xs-8"> <ul class="list-inline"> <li><a href="http://hk.voidcc.com/contact">聯系我們</a></li> <li>© 2020 HK.VOIDCC.COM</li> <li><a rel="nofollow" href="https://beian.miit.gov.cn/" target="_blank">沪ICP备13005482号-13</a></li> <li><script type="text/javascript" src="https://s9.cnzz.com/z_stat.php?id=1280098168&web_id=1280098168"></script></li> <li><a href="http://cn.voidcc.com/" target="_blank" title="程序问答园区">简体中文</a></li> <li><a href="http://hk.voidcc.com/" target="_blank" title="程序問答園區">繁體中文</a></li> <li><a href="http://ru.voidcc.com/" target="_blank" title="поле вопросов и ответов">Русский</a></li> <li><a href="http://de.voidcc.com/" target="_blank" title="Frage - und - antwort - Park">Deutsch</a></li> <li><a href="http://es.voidcc.com/" target="_blank" title="Preguntas y respuestas">Español</a></li> <li><a href="http://hi.voidcc.com/" target="_blank" title="कार्यक्रम प्रश्न और उत्तर पार्क">हिन्दी</a></li> <li><a href="http://it.voidcc.com/" target="_blank" title="IL Programma di chiedere Park">Italiano</a></li> <li><a href="http://ja.voidcc.com/" target="_blank" title="プログラム問答園区">日本語</a></li> <li><a href="http://ko.voidcc.com/" target="_blank" title="프로그램 문답 단지">한국어</a></li> <li><a href="http://pl.voidcc.com/" target="_blank" title="program o park">Polski</a></li> <li><a href="http://tr.voidcc.com/" target="_blank" title="Program soru ve cevap parkı">Türkçe</a></li> <li><a href="http://vi.voidcc.com/" target="_blank" title="Đáp ứng viên">Tiếng Việt</a></li> <li><a href="http://fr.voidcc.com/" target="_blank" title="Programme interrogation Park">Française</a></li> </ul> </div> </div> </div> </div> </div> </footer>  <script async src="https://www.googletagmanager.com/gtag/js?id=UA-77509369-5"></script> <script> window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments); } gtag('js', new Date()); gtag('config', 'UA-77509369-5'); </script> <script> var _hmt = _hmt || []; (function () { var hm = document.createElement("script"); hm.src = "https://hm.baidu.com/hm.js?67d4731349f0b00136755b80364ce381"; var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hm, s); })(); </script> </body> </html>

PHP：MySQL的返回值 「逃逸」 的textarea

回答

PHP：MySQL的返回值「逃逸」的textarea