What’s the difference between esc_html, esc_attr, esc_html_e, and so on?
esc_html() escapes a string so that it is not parsed as HTML. Characters like < are converted to <, for example. This will look the same to the reader, but it means that if the value being output is <script> then it won’t be interpreted by the browser as an actual script tag. Use this … Read more