Is htmlentities Function Enough For Verifying Form Fields?

[BlackRaven]

what do you guys use in combination with htmlentities()?

[jatar_k]

also always test that the value is

of the expected type
of expected length

[coopster]

I don't use htmlentities() for verifying form fields, but I do use it when I write any field values out to a form. If the data being used is user-supplied, make certain you follow jk's advice here and validate it.

[jatar_k]

I will also add

make sure it doesn't contain anything unwanted, which may go beyond type testing