Re: sanitizing get vars
| From: | GamblerZG | Date: | Thu, 02 Jun 2005 19:28:31 +0000 |
| Subject: | Re: sanitizing get vars | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-216261@lists.php.net to get a copy of this message | ||
set_magic_quotes_runtime( 0 );This is for database, not for showing data in browser. For browser you need to kill all unknow tags and all unknown properties of known tags. Afterwards, you need to prepend http:// to any urls that have unknow protocols. Alternatively, you can make sure that data diplayed to user is submitted by the same user. Example of the former method: http://token.by.ru/ksscripts/htmlparser6.txt