Quotes within value attribute

How are quotes escaped?

[theguX]

I have an input that's value is echoed by php:
<?
echo '<input type="text" value="' . $text1value . '" name="text1" />';
?>
My problem is the $textvalue1 contains quotes so when it the code is run it generates something like this:
<input type="text" value="blah blah " blah" name="text1" />
Is there any way of fixing this?

[Birdman]

Welcome to the boards, theguX!

Here is the function I use to display strings that may have quotes in form fields:

function form($str){
return htmlspecialchars [php.net](str_replace("''", "'", $str), ENT_QUOTES);
}

You may, or may not, need the str_replace() part. In my case, it fixes the automatic escaping of single quotes that happens on this server(magic_quotes).

Ther usage would be:

echo '<input type="text" value="' . form($text1value) . '" name="text1" />';

[bcc1234]

Use &quot;

[theguX]

Thanks. That works.

I tried that initially, but it didn't work for some reason, so thats why I posted here. It works now anyway.
Thanks!

[theguX]

Actually, I found out what the problem was.
This was my code:
function quotes($text)
{
$blah1 = array('"', '&');
$blah2 = array('&quot;', '&amp;');
return str_replace($blah1, $blah2, $text);
}
The problem was that as soon as it was replaced with &quot;, that was replaced with &amp;quot;. I got around this problem by doing this:
function quotes($text)
{
$blah1 = array('&', '"');
$blah2 = array('&amp;', '&quot;');
return str_replace($blah1, $blah2, $text);
}

Thanks again for your help.