detect html/javascript/php tags in string

[piti]

hi

i'm having problems with one user who started inserting weird pieces of code (html, javascript and php) into my messageboard
i had there the strip_tags() function, but the string was inserted not tag stripped :-(
does anyone have a regexp that detects all that html, php and javascript tags?
thanx

 

[sleipnir214]

I don't know if you can do it with a single regexp, but here's a link which might be what you're looking for:

http://www.mricon.com/html/phpfilter.html

Want the best answers? Ask the best questions:

http://www.tuxedo.org/~esr/faqs/smart-questions.html

TANSTAAFL!

 

[piti]

hi

i started to experiment and this came out:

preg_match('/<([a-z]+)[^>]*>.+<\/([a-z]+)[^>]*>|<(\?|%|([a-z]+)[^>]*).*(\?|%|)>/is',$text)

this detects all of them ( and something more ;-) )

 

[BB101]

you could just htmlentities

http://www.php.net/manual/en/function.htmlentities.php

--BB