新聞財經娛樂♬資訊 News Economy

Accepted Solution

Confirm Author: Wilson Edwards replied at 2025-02-10 11:59:04    

When it get the $str from div editable tag, and save its node.innerText by htmlentities($str) into database; it will generate<a></a>( not

Confirm Expert: rcschroeder replied at 2025-02-10 10:57:03    

The issue you're facing is due to the way PHP handles HTML entities and decoding. When you use `htmlentities()` function, it replaces special characters like `<`, `>`, etc. with their corresponding HTML entity codes (`&lt;`, `&gt;`, etc.) and vice versa.

When you decode the result using `html_entity_decode()`, it replaces these HTML entity codes back with their original characters, but only if they are valid HTML entities. However, in your case, there is no valid HTML entity code for `<` or `>` that would render as an actual HTML element.

In PHP, when you use `echo "<a></a>"`, it renders as an HTML element because the context is not escaped, meaning the string is not treated as HTML and the output is considered plain text. However, when you use `htmlentities()` or `html_entity_decode()`, the result is a string where these special characters are replaced with their entity codes.

In your specific case:

```php
$str = htmlentities("<a></a>");
```

`htmlentities()` replaces `<` and `>` with `&lt;` and `&gt;` respectively, resulting in `$str = "&lt;a&gt;&lt;/a&gt;"`.

Then, when you use `html_entity_decode()`, it decodes the entity codes back to their original characters:

```php
$str = html_entity_decode($str);
```

Since there is no valid HTML entity code for `<` or `>` that would render as an actual HTML element, `$str` becomes simply `"a"`. This is why `$str` is not equal to `"<a></a>"`.

To achieve the desired result of having an HTML element rendered as plain text (not treated as HTML), you need to escape the output using `htmlspecialchars()` function:

```php
$str = htmlspecialchars(htmlentities("<a></a>"));
```

This will replace any special characters with their corresponding HTML entity codes, but it won't render the elements. If you want to render an HTML element as plain text, consider using `echo` or `print` without wrapping your content in a PHP tag (`<?php ?>`):

```php
echo htmlspecialchars(htmlentities("<a></a>"));
```

This will output `<a></a>` directly as plain text, without being treated as HTML.

Confirm Expert: rcschroeder replied at 2025-02-09 22:22:37    

The behavior you're experiencing is due to the way `htmlentities()` and `html_entity_decode()` functions work in PHP.

When you use `echo <a>`, PHP automatically encloses the HTML element in a pair of `&lt;` and `&gt;` characters, which represent the HTML entities for `<` and `>`. This is known as "HTML escaping" or " escaping special characters".

However, when you use `htmlentities()` on a string that contains HTML elements, it replaces the HTML entities with their corresponding character codes. So in your case, `htmlentities("<a>")` would result in `&lt;a&gt;`, not `<a>`. This is because `htmlentities()` doesn't preserve the original HTML structure.

When you then use `html_entity_decode()` on this string, it removes the character codes and returns a plain string. Since there are no more HTML entities to decode, the resulting string is simply `<a>`.

The reason why your `$str` variable isn't equal to "<a>" is because `htmlentities()` and `html_entity_decode()` are not designed to preserve the original HTML structure. They're primarily used for escaping special characters in data that's being sent over a network or stored in a database, where the HTML entities can be safely rendered.

If you want to work with actual HTML elements in PHP, you should avoid using these functions. Instead, use DOMDocument or SimpleXML classes to parse and manipulate HTML strings. Here are some examples:

```php
// Using DOMDocument
$str = '<a>Link</a>';
$doc = new DOMDocument();
$doc->loadHTML($str);
echo $doc->firstChild->nodeValue; // Outputs: Link

// Using SimpleXML
$str = '<a>Link</a>';
$xml = simplexml_load_string($str);
echo (string)$xml; // Outputs: <a>Link</a>
```

In your case, if you want to get the HTML element as a string without preserving the HTML structure, you can use `html_entity_decode()` directly on the original string:

```php
$str = '<a></a>';
$unescaped_str = html_entity_decode($str);
echo $unescaped_str; // Outputs: <a></a>
```

Note that this approach will still render `<` and `>` as plain characters, not HTML elements.