i use htmlspecialchars() every thing working fine but it do not take ' this ...like don't,can't,won't how to fix this problem🙂
http://www.php.net/manual/en/function.addslashes.php
or
http://www.php.net/manual/en/function.addcslashes.php
It's always in the manual🙂
-geoff
htmlspecialchars() is not the same as escaping quotes.
If you need to escape quotes for use in a database, use addslashes(). If you want to use quotes to send through a URL, use urlencode()