Hi,

Just wondering why your plugin uses the PHP function htmlspecialchars() to convert special characters to HTML entities when saving to the database but then you also use the Wordpress esc_html() function to display this information on the front-end viewer. Isn't this duplicating effort?

I ask because now my database is full of encoded HTML characters and I can't use the raw data for other applications unless they are able to decode the HTML.

Hello Albert!

Thank you for posting your question!

Please note, that this is done to prevent security vulnerabilities. If we don't encode the HTML characters, spam bots will be able to post unwanted Javascript, and damage the system.

Thanks! Have a great day!