private static function sanitizeString($value)
    {
        // $_GET and $_REQUEST already urldecode()'d
        // decode
        // note: before php 5.2.7, htmlspecialchars() double encodes &#x hex items
        $value = html_entity_decode($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');

        $value = self::sanitizeNullBytes($value);

        // escape
        $tmp = @htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');

        // note: php 5.2.5 and above, htmlspecialchars is destructive if input is not UTF-8
        if ($value != '' && $tmp == '') {
            // convert and escape
            $value = utf8_encode($value);
            $tmp = htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');
            return $tmp;
        }
        return $tmp;
    }
private static function sanitizeString($value)
    {
        // $_GET and $_REQUEST already urldecode()'d
        // decode
        // note: before php 5.2.7, htmlspecialchars() double encodes &#x hex items
        $value = html_entity_decode($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');

        $value = self::sanitizeNullBytes($value);

        // escape
        $tmp = @htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');

        // note: php 5.2.5 and above, htmlspecialchars is destructive if input is not UTF-8
        if ($value != '' && $tmp == '') {
            // convert and escape
            $value = utf8_encode($value);
            $tmp = htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8');
            return $tmp;
        }
        return $tmp;
    }
private static function sanitizeString ( $ value ) { // $_GET and $_REQUEST already urldecode()'d // decode // note: before php 5.2.7, htmlspecialchars() double encodes &#x hex items $ value = html_entity_decode ( $ value , self :: HTML_ENCODING_QUOTE_STYLE , 'UTF-8' ) ; $ value = self :: sanitizeNullBytes ( $ value ) ; // escape $ tmp = @ htmlspecialchars ( $ value , self :: HTML_ENCODING_QUOTE_STYLE , 'UTF-8' ) ; // note: php 5.2.5 and above, htmlspecialchars is destructive if input is not UTF-8 if ( $ value != '' && $ tmp == '' ) { // convert and escape $ value = utf8_encode ( $ value ) ; $ tmp = htmlspecialchars ( $ value , self :: HTML_ENCODING_QUOTE_STYLE , 'UTF-8' ) ; return $ tmp ; } return $ tmp ; }
Sanitize a single input value

@param $value
@return string
Sanitize a single input value