Docs

EVF_CSV_Exporter::escape_data( string $data ): string

Escape a string to be used in a CSV context

Description

Malicious input can inject formulas into CSV files, opening up the possibility for phishing attacks and disclosure of sensitive information.

Additionally, Excel exposes the ability to launch arbitrary commands through the DDE protocol.

See also

Parameters

$datastringrequired
CSV field to escape.

Return

string