About htmlentities/html_entity_decode and security

Discussion in 'Programming/Scripts' started by padmx82, Sep 23, 2010.

  1. padmx82

    padmx82 New Member


    First of all, sorry for my english, I´m from Mexico.

    I´m developing a website in PHP/MySQL that implements a link to Google Maps. I want to save the html code from Google Maps in a table of the database, so I began reading about website security and the XSS topic came out.

    I began looking for preventive measures to avoid the XSS problem so I came with the "mysql_real_escape_string" function but then I also came up with tutorials about using "htmlentities" and "html_entity_decode" functions.

    My question for you is, is the combo "htmlentities/html_entity_decode" a good way to prevent the XSS problem or is there a better solution?

    Thanks in advance


Share This Page