使用PDO在数据库中存储html代码是否安全？

Question

Right now I'm using a form to store html input, and then storing them in the database using PDO and mysql. The website then uses these inserted values to display parts of the site. Is that safe? Is there a better solution? What are the possible security implications?

Answer 1

Is that safe? Yes, so long as you're using something like HTML Purifier when you actually display it to the user.

Is it the best solution? Perhaps not. But hardly the worst.