PHP Print Function Escape

Question

<?php print('GET');

If I have the following WHERE GET is a GET parameter, is it possible to escape this for nefarious purposes i.e. can it be hacked?

Thanks

Maybe you are wanting `htmlspecialchars()` / `htmlentities()`? — Rasclatt, Dec 21 '16 at 23:27

score 0 · Answer 1 · answered Dec 21 '16 at 23:30

0

Since you have 'GET' in quotes, it's a string literal. The fact that you have parameter $_GET['GET'] is not relevant -- when you print a literal, it just prints that string, it doesn't try to treat it as a variable, or the index in an array, or anything else.

So that print statement is perfectly safe.

answered Dec 21 '16 at 23:30

Barmar

741,623
53
500
612

I'm not sure what you mean by that. What did you add, and where? – Barmar Dec 22 '16 at 17:20

PHP Print Function Escape

1 Answers1