php中htmlentities原理

htmlentitieshtmlentities ( string string [, int quote_style [, string charset]]) 转换字符串为HTML字符编码

1） string:需转义的原字符串

2 ）quote_style:

Constant Name	Description
ENT_COMPAT	Will convert double-quotes and leave single-quotes alone.
ENT_QUOTES	Will convert both double and single quotes.
ENT_NOQUOTES	Will leave both double and single quotes unconverted

解释：ENT_COMPAT：转双引号，不转单引号

           ENT_QUOTES：单双都转

           ENT——NOQUOTES：只转单引号，不转双

3） charset：转换后的字符编码（特别注意，不设置有可能出现中文乱码）

Charset	Aliases	Description
ISO-8859-1	ISO8859-1	Western European, Latin-1
ISO-8859-15	ISO8859-15	Western European, Latin-9. Adds the Euro sign, French and Finnish letters missing in Latin-1(ISO-8859-1).
UTF-8		ASCII compatible multi-byte 8-bit Unicode.
cp866	ibm866, 866	DOS-specific Cyrillic charset. This charset is supported in 4.3.2.
cp1251	Windows-1251, win-1251, 1251	Windows-specific Cyrillic charset. This charset is supported in 4.3.2.
cp1252	Windows-1252, 1252	Windows specific charset for Western European.
KOI8-R	koi8-ru, koi8r	Russian. This charset is supported in 4.3.2.
BIG5	950	Traditional Chinese, mainly used in Taiwan.
GB2312	936	Simplified Chinese, national standard character set.
BIG5-HKSCS		Big5 with Hong Kong extensions, Traditional Chinese.
Shift_JIS	SJIS, 932	Japanese
EUC-JP	EUCJP	Japanese

 

举例：$test_s="<script>alert('sfdf王小二')</script>";
           echo(htmlentities($test_s,ENT_NOQUOTES,'UTF-8'));