check_plain

Encodes special characters in a plain-text string for display as HTML.

Also validates strings as UTF-8 to prevent cross site scripting attacks on Internet Explorer 6.

Parameters

$text: The text to be checked or processed.

Return value

An HTML safe version of $text, or an empty string if $text is not valid UTF-8.

See also

drupal_validate_utf8()

Related topics

Sanitization functions

Functions to sanitize values.

179 calls to check_plain()

10 string references to 'check_plain'

File

includes/bootstrap.inc, line 1571

Functions that need to be loaded on every Drupal request.

Code

function check_plain($text) {
  return htmlspecialchars($text, ENT_QUOTES, 'UTF-8');
}