Striping < ' > & from Strings and replacing them with Html Equivalents 1

[Johno2090]

I am looking for some asp code that will strip some user inputed code and remove ' < > & characters which have been crashing my applications. I have searche allover the web but have been unable to find anything of use.

 

[onpnt]

You can use the Replace function like this
Replace(Source,Find,Replacement)
example
Replace(&quot;blah&quot;,&quot;h&quot;,&quot;H&quot ' this returns blaH
to replace with a blank no space
Replace(&quot;bla>h&quot;,&quot;>&quot;,&quot;&quot ' returns blah I may not get it the 1st or 2nd time,
but how sweet that 15th time can be.

 

[snowboardr]

I suggest killing all html then only allowing the html you want such as bold etc..

Do this by doing this...

<%

Function KillHtml(mytext)

Replace(mytext, &quot;<&quot;, &quot;[&quot;)
Replace(mytext, &quot;>&quot;, &quot;]&quot;)

'# Allow these...
Replace(mytext, &quot;[b]&quot;, &quot;<b>&quot;)
Replace(mytext, &quot;[/b]&quot;, &quot;</b>&quot;)

End Function


'# Now to use it go like this...

SomeText = &quot;Hello there! < b>Welcome< /b> and ofcourse my example will be < blink>messed</blink> up...&quot;

Response.Write(KillHtml(SomeText))


%>

 

[JohnYingling]

Use the Server.HTMLEncode function if you want to display that information on the page.

http://www.VBResizer.com

Generate Forms/Controls Resizing/Tabbing Class

http://www.VBCompare.com

Compare Code (Text)

http://www.VBSortGen.com

Generate Sort Class in VB or VBScript

 

[AlaskanDad]

Any suggestions on removing or replacing the single apostrophe (') used in possessives like &quot;Mary's Info&quot;?

Users will want to use the apostrophe but we know that it doesn't display well.

 

[jkl]

for the single quote, try using:

Replace(mytext, &quot;'s&quot;, &quot;&#146;s&quot

 

[AlaskanDad]

jkl,

Thanks for the hint. I think that'll do the trick. By the way, do you know the CHR () code for the substitute. I think I will use that to make sure I don't mess it up.

 

[jkl]

looking at my post, i realize it doesn't help much, since the browser interpretted the ascii code into the apostrophe.

Replace(myText,&quot;'&quot;,&quot;&#.146;&quot

remove the . in &#.146;

also can use chr(146)

 

[AlaskanDad]

Great!

You proved my point and provided an answer all at the same time!