3v4l.org

run code in 300+ PHP versions simultaneously
<?php $question="<script>alert('hacked')</script>"; echo "<br>original question=",$question; $question = make_secure( $question ); echo "<br>converted question=",$question; echo "<br>converted question calling htmlspecialchars=",htmlspecialchars($question); function make_secure($data) { $data = htmlspecialchars($data); return $data; }
Output for 8.1.0 - 8.1.27, 8.2.0 - 8.2.17, 8.3.0 - 8.3.4
<br>original question=<script>alert('hacked')</script><br>converted question=&lt;script&gt;alert(&#039;hacked&#039;)&lt;/script&gt;<br>converted question calling htmlspecialchars=&amp;lt;script&amp;gt;alert(&amp;#039;hacked&amp;#039;)&amp;lt;/script&amp;gt;
Output for 4.3.0 - 4.3.11, 4.4.0 - 4.4.9, 5.0.0 - 5.0.5, 5.1.0 - 5.1.6, 5.2.0 - 5.2.17, 5.3.0 - 5.3.29, 5.4.0 - 5.4.45, 5.5.0 - 5.5.38, 5.6.0 - 5.6.38, 7.0.0 - 7.0.33, 7.1.0 - 7.1.25, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30
<br>original question=<script>alert('hacked')</script><br>converted question=&lt;script&gt;alert('hacked')&lt;/script&gt;<br>converted question calling htmlspecialchars=&amp;lt;script&amp;gt;alert('hacked')&amp;lt;/script&amp;gt;

preferences:
263.26 ms | 405 KiB | 420 Q