marsheng

What am I doing wrong. If I try the example on the web and enter "&'<>// in the name field - it echos the exact same text. Surely it should have returned null.

On your web page

https://www.w3schools.com/php/showphp.asp?filename=demo_form_validation_escapechar

and there is code there for validating the data entered.  The function however is never run as any %^#$ data entered is still echoed in the echo line.

Surely, these characters should have been removed ?

Thanks Wallace