CODEWITHSUNDEEP
phpxmlcharacter-encoding
jerrygarciuh
jerrygarciuh

Reputation: 21988

Make user input safe for XML

What is the best practice for generating valid XML with PHP from user submitted text, e.g. eCommerce sales data with ampersands, angle brackets, non-ascii accent characters, new lines etc etc.

What functions, libraries, regexes do folks rely on?

Upvotes: 5

Views: 313

Answers (4)

Sébastien Gicquel
Sébastien Gicquel

Reputation: 4386

You may also try :

html_entity_decode()

Upvotes: 0

hakre
hakre

Reputation: 197658

If you want binary safeness, then you need to use an additional transport encoding. For example you can use base64 or uuencode to store the data in a binary safe fashion inside an XML chunk.

Upvotes: 1

Steve Robbins
Steve Robbins

Reputation: 13812

Wrap information in CDATA tags and encode data with htmlentities()

'<tag><![CDATA[' . htmlentities($theData) . ']]></tag>'

Or using DOM

$dom = new DOMDocument("1.0", "utf-8");

/* ... */

$dom->createCDATASection(htmlentities($theData));

Upvotes: 4

John Conde
John Conde

Reputation: 219804

Upvotes: 0

Related Questions