PHP：MySQL的返回值「逃逸」的textarea

如果MySQL查詢的返回值包含""和/的內容顯示在textarea的PHP：MySQL的返回值「逃逸」的textarea

content = <a href="url">link</a>

echo()是textarea的內部使用外

<textarea><?php echo $row['value']; ?></textarea>

textarea顯示<a href=，接下來它顯示在textarea外

How包含textarea中的所有html？

來源

2010-09-25 Zebra

htmlspecialchars($row['value'])

來源

2010-09-25 17:28:44 Quentin

Dorwad，非常感謝！ – Zebra 2010-09-25 17:38:37

@dany：請注意，每次將文本放入HTML元素和屬性值時，都必須使用'htmlspecialchars（）'*，而不僅僅是在''中。如果您在不轉義的情況下允許不受信任的內容進入您的HTML，您將會遇到跨站點腳本安全漏洞。 – <span class="text-secondary"> <small> <a rel="noopener" target="_blank" href="https://stackoverflow.com/users/18936/">bobince</a></span> <span>2010-09-28 10:17:06</span> </small> </span> </p> </div> </div> </div> </div> </div> </article> <div> <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-6208739752673518" data-ad-slot="1038284119" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="clearfix"> </div> <div class="relative-box"> <div class="relative">相關問題</div> <ul class="relative_list"> <li> 1. <a href="http://hk.uwenku.com/question/p-dlptfibt-bbm.html" target="_blank" title="逃逸「價值」"> 逃逸「價值」 </a> </li> <li> 2. <a href="http://hk.uwenku.com/question/p-wviwjnfx-vd.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li> 3. <a href="http://hk.uwenku.com/question/p-afhdcusu-bq.html" target="_blank" title="逃逸的unicode"> 逃逸的unicode </a> </li> <li> 4. <a href="http://hk.uwenku.com/question/p-mabkudja-vv.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li> 5. <a href="http://hk.uwenku.com/question/p-xnwscfud-nn.html" target="_blank" title="回聲，殼逃逸參數"> 回聲，殼逃逸參數 </a> </li> <li> 6. <a href="http://hk.uwenku.com/question/p-cwfqhgxx-nd.html" target="_blank" title="逃逸報價PHP回聲"> 逃逸報價PHP回聲 </a> </li> <li> 7. <a href="http://hk.uwenku.com/question/p-erxxskdy-th.html" target="_blank" title="逃逸PHP GET和POST值"> 逃逸PHP GET和POST值 </a> </li> <li> 8. <a href="http://hk.uwenku.com/question/p-rtwuxepw-oa.html" target="_blank" title="逃逸SVG嵌入文本"> 逃逸SVG嵌入文本 </a> </li> <li> 9. <a href="http://hk.uwenku.com/question/p-aimeogsu-yh.html" target="_blank" title="LoadRunner的VUGEN逃逸"> LoadRunner的VUGEN逃逸 </a> </li> <li> 10. <a href="http://hk.uwenku.com/question/p-zsvgexvn-bhm.html" target="_blank" title="PHP的sprintf逃逸％"> PHP的sprintf逃逸％ </a> </li> <div> <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block; text-align:center;" data-ad-layout="in-article" data-ad-format="fluid" data-ad-client="ca-pub-6208739752673518" data-ad-slot="4606349252"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> <li> 11. <a href="http://hk.uwenku.com/question/p-nttkzpad-qu.html" target="_blank" title="逃逸報價"> 逃逸報價 </a> </li> <li> 12. <a href="http://hk.uwenku.com/question/p-gvqmyacv-mn.html" target="_blank" title="逃逸空間"> 逃逸空間 </a> </li> <li> 13. <a href="http://hk.uwenku.com/question/p-neswdltl-bmc.html" target="_blank" title="逃逸「[」從JSON"> 逃逸「[」從JSON </a> </li> <li> 14. <a href="http://hk.uwenku.com/question/p-dntgvjmc-xm.html" target="_blank" title="逃逸在PHP"> 逃逸在PHP </a> </li> <li> 15. <a href="http://hk.uwenku.com/question/p-hvcfbonc-bda.html" target="_blank" title="逃逸的Json在MVC2"> 逃逸的Json在MVC2 </a> </li> <li> 16. <a href="http://hk.uwenku.com/question/p-snyynbqk-br.html" target="_blank" title="逃逸冒號"> 逃逸冒號 </a> </li> <li> 17. <a href="http://hk.uwenku.com/question/p-blzbjecm-ck.html" target="_blank" title="逃逸問題"> 逃逸問題 </a> </li> <li> 18. <a href="http://hk.uwenku.com/question/p-uvwrvzac-bmq.html" target="_blank" title="HTML逃逸"> HTML逃逸 </a> </li> <li> 19. <a href="http://hk.uwenku.com/question/p-drzgguxv-vg.html" target="_blank" title="HTML屬性逃逸"> HTML屬性逃逸 </a> </li> <li> 20. <a href="http://hk.uwenku.com/question/p-kgagdukx-bhd.html" target="_blank" title="的Lua的String.format逃逸"> 的Lua的String.format逃逸 </a> </li> <li> 21. <a href="http://hk.uwenku.com/question/p-zwzlmmbf-wk.html" target="_blank" title="Hash.from_xml雙逃逸&"> Hash.from_xml雙逃逸& </a> </li> <li> 22. <a href="http://hk.uwenku.com/question/p-kaeifnqj-bmu.html" target="_blank" title="PHP：MySQL查詢返回數組"> PHP：MySQL查詢返回數組 </a> </li> <li> 23. <a href="http://hk.uwenku.com/question/p-wahapvuj-ud.html" target="_blank" title="玉逃逸的問題？"> 玉逃逸的問題？ </a> </li> <li> 24. <a href="http://hk.uwenku.com/question/p-uyikdezi-k.html" target="_blank" title="的Unicode逃逸行爲"> 的Unicode逃逸行爲 </a> </li> <li> 25. <a href="http://hk.uwenku.com/question/p-thkvqhxw-yv.html" target="_blank" title="的String.Format逃逸VB VS C＃"> 的String.Format逃逸VB VS C＃ </a> </li> <li> 26. <a href="http://hk.uwenku.com/question/p-cfdxasbv-dk.html" target="_blank" title="MySQL的逃逸getsqlvaluestring ACCID"> MySQL的逃逸getsqlvaluestring ACCID </a> </li> <li> 27. <a href="http://hk.uwenku.com/question/p-bvmgybed-my.html" target="_blank" title="$ _POST內的逃逸字符"> $ _POST內的逃逸字符 </a> </li> <li> 28. <a href="http://hk.uwenku.com/question/p-rsqzeoaq-bch.html" target="_blank" title="逃逸引號的問題"> 逃逸引號的問題 </a> </li> <li> 29. <a href="http://hk.uwenku.com/question/p-pxdjyoam-bnm.html" target="_blank" title="逃逸的String.Format佔位"> 逃逸的String.Format佔位 </a> </li> <li> 30. <a href="http://hk.uwenku.com/question/p-ztujctze-beg.html" target="_blank" title="Java的逃逸參考「這」"> Java的逃逸參考「這」 </a> </li> </ul> </div> <div> <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block" data-ad-format="autorelaxed" data-ad-client="ca-pub-6208739752673518" data-ad-slot="1575177025"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> <div class="padding-top-10"></div> </div> </div> <script type="text/javascript" src="http://img.uwenku.com/uwenku/script/side.js?t=1644592048261"></script> <script type="text/javascript" src="http://img.uwenku.com/uwenku/plugin/highlight/highlight.pack.js"></script> <link href="http://img.uwenku.com/uwenku/plugin/highlight/styles/docco.css" media="screen" rel="stylesheet" type="text/css" /> <script type="text/javascript"> $('pre').each(function(i, e) { hljs.highlightBlock(e, "<span class='indent'> </span>", false) }); </script> <div class="col-lg-3 col-md-4 col-sm-5"> <div id="rightTop"> <div class="row"> <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-6208739752673518" data-ad-slot="5415218910" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> <div class="row sidebar panel panel-default"> <div class="panel-heading font-bold"> 最新問題 </div> <div class="m-b-sm m-t-sm clearfix"> <ul class="side_article_list"> <li class="side_article_list_item"> 1. <a href="http://hk.uwenku.com/question/p-bacwjvuk-bar.html" target="_blank" title="觸發器在oracle2中相乘兩列"> 觸發器在oracle2中相乘兩列 </a> </li> <li class="side_article_list_item"> 2. <a href="http://hk.uwenku.com/question/p-mikdcmvo-wt.html" target="_blank" title="紅寶石適用看跌數組"> 紅寶石適用看跌數組 </a> </li> <li class="side_article_list_item"> 3. <a href="http://hk.uwenku.com/question/p-ycuwofaj-xg.html" target="_blank" title="如何將目標中生成的內容部署到帶有MSBuild的UWP應用程序中的AppX包中"> 如何將目標中生成的內容部署到帶有MSBuild的UWP應用程序中的AppX包中 </a> </li> <li class="side_article_list_item"> 4. <a href="http://hk.uwenku.com/question/p-pkzsguhh-wz.html" target="_blank" title="SQL Server：CASE和連接字符串"> SQL Server：CASE和連接字符串 </a> </li> <li class="side_article_list_item"> 5. <a href="http://hk.uwenku.com/question/p-nipjwnwn-yy.html" target="_blank" title="爲什麼css網格在IE和Edge中不起作用？"> 爲什麼css網格在IE和Edge中不起作用？ </a> </li> <li class="side_article_list_item"> 6. <a href="http://hk.uwenku.com/question/p-nqufrtsz-ze.html" target="_blank" title="保持html頁面內svg的大小"> 保持html頁面內svg的大小 </a> </li> <li class="side_article_list_item"> 7. <a href="http://hk.uwenku.com/question/p-ybfrlzqz-xw.html" target="_blank" title="在R中設置kmeans的靜態中心"> 在R中設置kmeans的靜態中心 </a> </li> <li class="side_article_list_item"> 8. <a href="http://hk.uwenku.com/question/p-obibwibz-xp.html" target="_blank" title="我怎樣才能在沒有警告的情況下設置一個很長的長號碼？"> 我怎樣才能在沒有警告的情況下設置一個很長的長號碼？ </a> </li> <li class="side_article_list_item"> 9. <a href="http://hk.uwenku.com/question/p-fmboewhr-yc.html" target="_blank" title="如何更改jSpinners的ArrayList中的值？"> 如何更改jSpinners的ArrayList中的值？ </a> </li> <li class="side_article_list_item"> 10. <a href="http://hk.uwenku.com/question/p-ryzljqmv-wn.html" target="_blank" title="提取數據"> 提取數據 </a> </li> </ul> </div> </div> </div> <p class="article-nav-bar"></p> <div class="row sidebar article-nav"> <div class="row box_white visible-sm visible-md visible-lg margin-zero"> <div class="top"> <h3 class="title"><i class="glyphicon glyphicon-th-list"></i> 相關問題</h3> </div> <div class="article-relative-content"> <ul class="side_article_list"> <li class="side_article_list_item"> 1. <a href="http://hk.uwenku.com/question/p-dlptfibt-bbm.html" target="_blank" title="逃逸「價值」"> 逃逸「價值」 </a> </li> <li class="side_article_list_item"> 2. <a href="http://hk.uwenku.com/question/p-wviwjnfx-vd.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li class="side_article_list_item"> 3. <a href="http://hk.uwenku.com/question/p-afhdcusu-bq.html" target="_blank" title="逃逸的unicode"> 逃逸的unicode </a> </li> <li class="side_article_list_item"> 4. <a href="http://hk.uwenku.com/question/p-mabkudja-vv.html" target="_blank" title="逃逸％"> 逃逸％ </a> </li> <li class="side_article_list_item"> 5. <a href="http://hk.uwenku.com/question/p-xnwscfud-nn.html" target="_blank" title="回聲，殼逃逸參數"> 回聲，殼逃逸參數 </a> </li> <li class="side_article_list_item"> 6. <a href="http://hk.uwenku.com/question/p-cwfqhgxx-nd.html" target="_blank" title="逃逸報價PHP回聲"> 逃逸報價PHP回聲 </a> </li> <li class="side_article_list_item"> 7. <a href="http://hk.uwenku.com/question/p-erxxskdy-th.html" target="_blank" title="逃逸PHP GET和POST值"> 逃逸PHP GET和POST值 </a> </li> <li class="side_article_list_item"> 8. <a href="http://hk.uwenku.com/question/p-rtwuxepw-oa.html" target="_blank" title="逃逸SVG嵌入文本"> 逃逸SVG嵌入文本 </a> </li> <li class="side_article_list_item"> 9. <a href="http://hk.uwenku.com/question/p-aimeogsu-yh.html" target="_blank" title="LoadRunner的VUGEN逃逸"> LoadRunner的VUGEN逃逸 </a> </li> <li class="side_article_list_item"> 10. <a href="http://hk.uwenku.com/question/p-zsvgexvn-bhm.html" target="_blank" title="PHP的sprintf逃逸％"> PHP的sprintf逃逸％ </a> </li> </ul> </div> </div> </div> </div> </div> </div> </div>  <footer id="footer"> <div class="bg-simple lt"> <div class="container"> <div class="row padder-v m-t"> <div class="col-xs-8"> <ul class="list-inline"> <li><a href="http://hk.uwenku.com/contact">聯系我們</a></li> <li>© 2020 HK.UWENKU.COM</li> <li><a target="_blank" href="https://beian.miit.gov.cn/">沪ICP备13005482号-4</a></li> <li><script type="text/javascript" src="https://v1.cnzz.com/z_stat.php?id=1280101193&web_id=1280101193"></script></li> <li><a href="http://www.uwenku.com/" target="_blank" title="优文库">简体中文</a></li> <li><a href="http://hk.uwenku.com/" target="_blank" title="優文庫">繁體中文</a></li> <li><a href="http://ru.uwenku.com/" target="_blank" title="поле вопросов и ответов">Русский</a></li> <li><a href="http://de.uwenku.com/" target="_blank" title="Frage - und - antwort - Park">Deutsch</a></li> <li><a href="http://es.uwenku.com/" target="_blank" title="Preguntas y respuestas">Español</a></li> <li><a href="http://hi.uwenku.com/" target="_blank" title="कार्यक्रम प्रश्न और उत्तर पार्क">हिन्दी</a></li> <li><a href="http://it.uwenku.com/" target="_blank" title="IL Programma di chiedere Park">Italiano</a></li> <li><a href="http://ja.uwenku.com/" target="_blank" title="プログラム問答園区">日本語</a></li> <li><a href="http://ko.uwenku.com/" target="_blank" title="프로그램 문답 단지">한국어</a></li> <li><a href="http://pl.uwenku.com/" target="_blank" title="program o park">Polski</a></li> <li><a href="http://tr.uwenku.com/" target="_blank" title="Program soru ve cevap parkı">Türkçe</a></li> <li><a href="http://vi.uwenku.com/" target="_blank" title="Đáp ứng viên">Tiếng Việt</a></li> <li><a href="http://fr.uwenku.com/" target="_blank" title="Programme interrogation Park">Française</a></li> </ul> </div> </div> </div> </div> </div> </footer>  <script> var _hmt = _hmt || []; (function() { var hm = document.createElement("script"); hm.src = "https://hm.baidu.com/hm.js?f78a970f17b19a79fc477a3378096f29"; var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hm, s); })(); </script> </body> </html>

PHP：MySQL的返回值 「逃逸」 的textarea

回答

PHP：MySQL的返回值「逃逸」的textarea