Re[2]: [PHP] Re: strip_tags bug ?

On Friday, June 7, 2002 at 10:23:08 PM, you wrote: > Hmm... you could always do something like: > $t = ereg_replace(" < ", " &lt; ", $t); > $t = ereg_replace(" > ", " &gt; ", $t); > $nt = strip_tags($t); > $nt = ereg_replace(" &lt; ", " < ", $nt); > $nt = ereg_replace(" &gt; ", " > ", $nt); > maybe? That depends on what you're attempting to do. It would leave the following SCRIPT section intact... < SCRIPT language="javascript" > // do something nasty here < /SCRIPT> I don't know what others use strip_tags for, but I've only ever used it to remove script/html tags from forum posts. Using your code would create a massive security hole. -- Stuart