ABSTRACT

Even though the client browser has been told to send valid UTF-8 characters with

header('Content-Type: text/html; charset = utf-8'),

the server still needs to verify the character set to account for any cases where invalid characters have either accidently or maliciously been sent.