don't want html tags in my forum

[tranquillo]

Hi...

I've built a forum/guestbook thing for a website. it's verry basic. it simply writes text into a database and then shows it on a new page. the problem is that if someone writes a html tag such as a <img src...> the image will show... I don'w want that...
can someone help me with this?

thanx.

-s

 

[danielhozac]

Or use the already created PHP functions for accomplishing this:

http://www.php.net/function.htmlentities

//Daniel

 

[piti]

i do not allow tags at all in my forum and simply do not write that message into db, for this reason i use this regexp, it also detects any code that needs to be enclosed in <starting_string ending_string> like for php <? ?>

preg_match('/<([a-z]+)[^>]*>.+<\/([a-z]+)[^>]*>|<(\?|%|([a-z]+)[^>]*).*(\?|%|)>/is',$str_msg_new)

u can use it also in javascript, so before submitting the info check the text entered

 

[spookie]

U can also make use of htmlspecialchars().

http://in.php.net/manual/en/function.htmlspecialchars.php

--------------------------------------------------------------------------
I never set a goal because u never know whats going to happen tommorow.