Poor PHP code simplification

CopyCode The Code is as follows: <?
Echo ("<p> search results for query :").
$ _ Get ['query']. ". </P> ";
?>

The main problem with this Code is that it directly displays the data submitted by the user on the webpage, resulting in an XSS vulnerability. There are actually many ways to fill this vulnerability. So what code is what we want?Copy codeThe Code is as follows: <?
Echo ("<p> search results for query :").
Htmlspecialchars ($ _ Get ['query']). ". </P> ";
?>

This is the minimum requirement. The XSS vulnerability is filled by the htmlspecialchars function, thus blocking invalid characters.Copy codeThe Code is as follows: <? PHP
If (isset ($ _ Get ['query'])
Echo '<p> search results for query :',
Htmlspecialchars ($ _ Get ['query'], ent_quotes). '. </P> ';
?>

the person who can write this code should be the one I want to hire:
* * judge whether the $ _ Get ['query'] value is null before outputting it.
* the extra parentheses in the ECHO command are removed.
* the string is limited by single quotes, saving PHP time to search for replaceable variables from the string.
* use commas instead of periods to save the echo time.
* pass the ent_quotes identifier to the htmlspecialchars function to ensure that single quotes are escaped. Although this is not the most important, it is also a good habit