Answer A is correct because htmlspecialchars() will convert special characters
to HTML entities that will display correctly in any Web client. Answer B is incorrect
because addslashes() only escapes single quotes. Answer C is incorrect
because escapeshellargs() is only helpful when dealing with shell command
arguments. Answer D is incorrect because URL encoding is not interpreted by
Web clients except in the context of URLs.