Difference between revisions of "Learning PHP (2)"
Karl Jones (Talk | contribs) (→Timestamp) |
Karl Jones (Talk | contribs) |
||
| Line 41: | Line 41: | ||
See [[PHP date]] for more information. | See [[PHP date]] for more information. | ||
| + | |||
| + | == HTML special character handling == | ||
| + | |||
| + | Warning: this topic is critical to [[web security]]. | ||
| + | |||
| + | '''Always use htmlspecialcharacters''' (or some equivalent technology) '''when processing [[user input]]'''. Always, always, always. | ||
| + | |||
| + | PHP provides a function named [[PHP htmlspecialchars function|htmlspecialchars]] which handles [[special HTML characters]]. | ||
| + | |||
| + | Handles, in this case, includes replacing dangerous HTML with safe HTML. | ||
| + | |||
| + | See [[PHP htmlspecialchars function]]. | ||
| + | |||
| + | See [http://code.karljones.com/php/htmlspecialchars/ Online example] | ||
== See Also == | == See Also == | ||
| Line 48: | Line 62: | ||
* [[PHP date]] | * [[PHP date]] | ||
* [[PHP date and time]] | * [[PHP date and time]] | ||
| + | * [[PHP htmlspecialchars function]] | ||
* [[PHP timestamp]] | * [[PHP timestamp]] | ||
Revision as of 12:21, 3 September 2015
This article contains examples of PHP.
Contents
Timestamp
PHP provides the time function, which returns the time (from the server clock).
The time can be formatted and used in a variety of ways.
Code snippet:
<p><?php echo time(); ?></p>
Observe how the above code snippet mixes HTML with PHP code islands.
Use your browser's View Source or Inspect Element to confirm that the web page's source code contains only HTML, no PHP.
See [time] for documentation, Timestamp for general information.
Date
PHP provides the date() function, which returns date and time.
The date and time can be formatted and used in a variety of ways.
Code snippet:
<p><?php echo date("Y/m/d"); ?></p>
<p><?php echo date("l"); ?></p>
Observe how the above code snippet mixes HTML with PHP code islands.
Use your browser's View Source or Inspect Element to confirm that the web page's source code contains only HTML, no PHP.
See PHP date for more information.
HTML special character handling
Warning: this topic is critical to web security.
Always use htmlspecialcharacters (or some equivalent technology) when processing user input. Always, always, always.
PHP provides a function named htmlspecialchars which handles special HTML characters.
Handles, in this case, includes replacing dangerous HTML with safe HTML.
See PHP htmlspecialchars function.
See Online example
