htmlspecialchars

[kbc1]

Hi all

I'm going a bit nuts. Can anyone suggest why the following does not convert the ampersands to & please when the form is posted? It actually does nothing except escape the quotes but my understand was that it should convert the quotes to there respective HTML characters.

$subject = htmlspecialchars($_POST['subject'], ENT_QUOTES);

'subject' is the name of my text field in my form. If I type single or double quotes, they are successfully escaped because I am using ENT_QUOTES therefore I know part of it is working, however the ampersands are not converted at all.

Any suggestions?

Thanks in advance

[Weedpacket]

It's probably an obvious thing to check, but it's happened here before - not too long ago, in fact, but: are you sure you're not just looking at the value of $subject as though it were HTML, with & being rendered as &?

[ashley98860615]

Weedpacket wrote:

It's probably an obvious thing to check, but it's happened here before - not too long ago, in fact, but: are you sure you're not just looking at the value of $subject as though it were HTML, with & being rendered as &?

lol done it before too :queasy: