PHP中htmlentities和 htmlspecialchars区别

简介：

string htmlspecialchars ( string $string [, int $flags = ENT_COMPAT | ENT_HTML401 [, string $encoding = ini_get("default_charset") [, bool $double_encode = true ]]] )

string htmlentities ( string $string [, int $flags = ENT_COMPAT | ENT_HTML401 [, string $encoding = ini_get("default_charset") [, bool $double_encode = true ]]] )

从上面php中htmlentities和htmlspecialcharx的接口定义可以知道：

两者都是将html特殊符号（如< > & ’ “）等转化为一个替代的html entity（如：< 对应<），但是两者之间还是有一些区别。

用法如下：

$str = "A 'quote' is <b>bold</b>";

echo htmlentities($str);
// Outputs: A 'quote' is <b>bold</b>


echo htmlentities($str, ENT_QUOTES);
// Outputs: A 'quote' is <b>bold</b>

参数说明：
flag 标志是否处理单引号、双引号：

ENT_COMPAT Will convert double-quotes and leave single-quotes alone.
ENT_QUOTES Will convert both double and single quotes.
ENT_NOQUOTES Will leave both double and single quotes unconverted.

encoding：字符集编码

差别：

要理解两者的差别，先看两个文档说明：

1. 简介：

• html_entity_decode — Convert all HTML entities to their applicable characters
• htmlentities — Convert all applicable characters to HTML entities
• htmlspecialchars_decode — Convert special HTML entities back to characters
• htmlspecialchars - Convert special characters to HTML entities

2. 文档