check_plain($text)
drupal/includes/bootstrap.inc, line 809
Encode special characters in a plain-text string for display as HTML.
Uses drupal_validate_utf8 to prevent cross site scripting attacks on Internet Explorer 6.
function check_plain($text) {
return drupal_validate_utf8($text) ? htmlspecialchars($text, ENT_QUOTES) : '';
}