title: varchar vs text - MySQL
body: <p>in my project an user can write comment [plain text], and view others comment, can delete own comment, but can not update comment !<br>
  In this case which would should i use ? </p>
  
  <p><strong>Text or Varchar(4048)</strong> ?<br>
  <strong>What is the advantage and disadvantage of Text and Varchar(large like 4000)</strong> ?<br>
  <strong>Is it secure enough if i replace only '&lt;' with '&amp; lt;' and '>' with '&amp; gt;' to make sure everything is fine</strong> ?<br>
  [i dont want to convert all those like ' " &amp; ..., to save space, i just want to make sure user can not write javascript] </p>
  
  <p>There will be a limit on the front end</p>