[PHP] question about security

[Alan Fullmer]

Is php capable of recognizing things such as in a text box, someone were to put <?php 
insert php code here; ?> and display say, variables?

do i have to htmlspecialchars every entry?

does this make any sense?

thanks in advance.