Disallowing HTML in textarea / comment form

On Mon, 13 Oct 2008 20:35:23 +0200, Michael Fesser <netizen@gmx.de>
wrote:

>But maybe sometimes you want to allow HTML as part of the message (for
>example to give code examples). I would simply call htmlspecialchars()
>on the output, that's enough.

That's possible. It would depend on the circumstances and what the
form were used for. I only mentioned it as an alternative.

Gary

.oO(Gary White)

>On Sat, 11 Oct 2008 16:19:02 +0100, David Powers <david@example.com>
>wrote:
>
>>Use either strip_tags() or htmlentities():
>>
>> http://docs.php.net/manual/en/function.strip-tags.php
>> http://docs.php.net/manual/en/function.htmlentities.php
>
>Or compare the results of the strip_tag() function with what was
>posted and generate an error if they don't match.

But maybe sometimes you want to allow HTML as part of the message (for
example to give code examples). I would simply call htmlspecialchars()
on the output, that's enough.

Micha

Thanks alot, managed to fix it.

Thanks again.

On Sat, 11 Oct 2008 16:19:02 +0100, David Powers <david@example.com>
wrote:

>Use either strip_tags() or htmlentities():
>
> http://docs.php.net/manual/en/function.strip-tags.php
> http://docs.php.net/manual/en/function.htmlentities.php

Or compare the results of the strip_tag() function with what was
posted and generate an error if they don't match.

Gary

Dev_Guy07 wrote:
> How can i prevent that from happening and id there anyway to save the & call
> the html code as plain text?

Use either strip_tags() or htmlentities():

http://docs.php.net/manual/en/function.strip-tags.php
http://docs.php.net/manual/en/function.htmlentities.php

--
David Powers, Adobe Community Expert
Author, "The Essential Guide to Dreamweaver CS3" (friends of ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/