$encoded = encode_entities($input, '<>&"'); # or $encoded = encode_entities_numeric($input, '<>&"');