Re: Removing security-problematic chars from strings
| From: | Marek Kilimajer | Date: | Sat, 22 Nov 2003 00:00:10 +0000 |
| Subject: | Re: Removing security-problematic chars from strings | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-170637@lists.php.net to get a copy of this message | ||
John W. Holmes wrote:
My only point was that I felt you _did_ need to use regular expression to ensure you're only converting paired tags. Just using str_replace() could leave orphaned tags unless you're keeping a count of what's been replaced. :)I would suggest to use xml parsing functions to ensure the html is valid and won't mess up the site design.