PHP htmlentities并以xml格式保存数据

Question

Im trying to save some data into a xml file using the following PHP script:

<?php

$string = '<a href="google.com/maps">Go to google maps</a> and some special characters ë è & ä etc.';

$string = htmlentities($string, ENT_QUOTES, 'UTF-8');

$doc = new DOMDocument('1.0', 'UTF-8');
$doc->preserveWhiteSpace = false;
$doc->formatOutput = true;

$root = $doc->createElement('top');
$root = $doc->appendChild($root);

$title = $doc->createElement('title');
$title = $root->appendChild($title);

$id = $doc->createAttribute('id');
$id->value = '1';
$text = $title->appendChild($id);

$text = $doc->createTextNode($string);
$text = $title->appendChild($text);

$doc->save('data.xml');

echo 'data saved!';

?>

I'm using htmlentities to translate all of the string into an html format, if I leave this out the special characters won't be translated to html format. this is the output:

<?xml version="1.0" encoding="UTF-8"?>
<top>
  <title id="1">&amp;lt;a href=&amp;quot;google.com/maps&amp;quot;&amp;gt;Go to google maps&amp;lt;/a&amp;gt; and some special characters &amp;euml; &amp;egrave; &amp;amp; &amp;auml; etc.</title>
</top>

The ampersand of the html tags get a double html code: < and an ampersand becomes: &

Is this normal behavior? Or how can I prevent this from happening? Looks like a double encoding.

Answer 1

Try to remove the line:

$string = htmlentities($string, ENT_QUOTES, 'UTF-8');

Because the text passed to createTextNode() is escaped anyway.

Update: If you want the utf-8 characters to be escaped. You could leave that line and try to add the $string directly in createElement().

For example:

$title = $doc->createElement('title', $string);
$title = $root->appendChild($title);

In PHP documentation it says that $string will not be escaped. I haven't tried it, but it should work.