Sorry if my question is dumb, but I’m really confused...

I got feedback from security guy and he pointed out that I should use proper escaping of user input in my code. So I’ve done some research and found escaping functions... But...

What’s the difference between them? When should I use esc_html() and when esc_attr()? And when should I use these functions with _e() at the end?

I got feedback from security guy and he pointed out that I should use proper escaping of user input in my code. So I've done some research and found escaping functions.

What’s the difference between them? When should I use esc_html() and when esc_attr()? And when should I use these functions with _e() at the end?

sorry if my question is dumb, but I’m really confused...

I got feedback from security guy and he pointed that I should use proper escaping of user input in my code. So I’ve done some research and found escaping functions... But...

What’s the difference between them? When should I use esc_html and when esc_attr? And when should I use these functions with _e at the end?

Sorry if my question is dumb, but I’m really confused...

I got feedback from security guy and he pointed out that I should use proper escaping of user input in my code. So I’ve done some research and found escaping functions... But...

What’s the difference between them? When should I use esc_html() and when esc_attr()? And when should I use these functions with _e() at the end?