zhhealthcare/openemr — comment on commit 07cdb1e0f48d33e0d25ce52363b3428106d51c75
File: interface/billing/billing_report.php line 1064
By bradymiller:

Remember to escape it:

Now have shortcuts for htmlspecialchars (they are much easier to use):
attr($string) -- same as htmlspecialchars with ENT_QUOTES
text($string) -- same as htmlspecialchars with ENT_NOQUOTES

AND even gace shortcuts for when also translating the string:
xla($string) -- same as xl(attr($string))
xlt($string) -- same as xl(text($string))