Should PHP developers use htmlentities() or addslashes() functions to sanitize user inputs before storing them in a database?

PHP developers should use the htmlentities() function to sanitize user inputs before storing them in a database. This function converts special characters to their HTML entities, preventing any potential XSS attacks. addslashes() function is not recommended for sanitizing user inputs as it may not protect against all types of SQL injection attacks. 

$userInput = $_POST['user_input'];
$cleanInput = htmlentities($userInput);
// Store $cleanInput in the database

Keywords

PHP htmlentities() addslashes() sanitize database

Related Questions