PHP撇号逃脱了破坏链接

Question

I was provided with a set of data that represents URL links. Such as: "doug'sfood.jpg".

.

I keep these strings in an array, and then select them randomly to display inserting them into an

<img src="doug'sfood.jpg"></img>

What Chrome is putting out is:

<img src="doug&#39;sfood.jpg"></img>

I tried replacing the quotes with a php escaped (\') apostrophe, but this just ended the quote prematurely.

Can someone help me? Thanks.

Answer 1

I think Chrome automatically escapes characters that are not correctly escaped.

Always use:

<img src="quote&#39;quote.jpg" alt="" />

Instead of:

<img src="quote'quote.jpg" alt="" />

Certain characters should always be escaped in HTML, for example:

' -> '
& -> & or &

Check the htmlspecialchars() and urlencode() functions, example:

$string = "quote'quote.jpg";

echo htmlspecialchars($string, ENT_QUOTES);
// quote'quote.jpg

echo urlencode($string);
// quote%27quote.jpg