10 ms·
You are comparing a framework to a language though. Escaping in PHP is usually handled by the templating component, you don't go around writing htmlentities() e
by FranOntanaya 7y ago
You are comparing a framework to a language though. Escaping in PHP is usually handled by the templating component, you don't go around writing htmlentities() everywhere.
- icedchai 7y agoIf you're dealing with decade old code that uses no framework, you certainly do. PHP is, by default, a primitive templating language...
- chriswarbo 7y agoPHP comes with a Web framework built in (that's what things like `$_GET`, `$_POST`, `htmlentities`, etc. are). It is also a templating language, that's why we need to write `<?` at the start (to open a PHP tag).