What is the issue with outputting the HTML code stored in a database using PHP echo?

When outputting HTML code stored in a database using PHP echo, the issue is that the HTML tags within the stored code will be treated as part of the PHP script and not rendered as HTML on the webpage. To solve this issue, you can use the PHP function htmlspecialchars() to encode the HTML tags before outputting them. This will ensure that the HTML code is displayed correctly on the webpage without being interpreted as PHP code. 

<?php
// Retrieve HTML code from database
$htmlCode = "<p>Hello, <strong>World!</strong></p>";

// Output the HTML code using htmlspecialchars() to encode HTML tags
echo htmlspecialchars($htmlCode);
?>

Keywords

HTML code database PHP echo escaping security

Related Questions