Escape character-whether Php escapes when a string is stored or taken, and what processing is required

The user's data should be stored in the database when escaped or taken when escaped, or to the front-end, in the template for processing.

At the same time, what processing is required? Thank you!

Reply content:

The user's data should be stored in the database when escaped or taken when escaped, or to the front-end, in the template for processing.

At the same time, what processing is required? Thank you!

The database stores the original data and is escaped on display because you cannot foresee how the data should be escaped.

Personal view: Now generally used PDO pretreatment, save the original data, the output when escaped, but rich text because the output is not escaped, so the time to save the need to filter. With php_mysql words, or mysql_real_escape_string a better.

