> Actually, yes, the data is likely to be redisplayed to the users on a
> website.

I covered that in my answer. Likely maybe; a certainty no.

> However, when shoving the data to the browser, I use
> htmlentities(). Is it recommended to use strip_tags() before sending to
> htmlentities()?

Not unless you need to strip HTML tags. Usually htmlspecialchars() is enough.

-- 
Richard Heyes
http://www.phpguru.org

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to