Re: strip_tags
| From: | Richard Heyes | Date: | Tue, 12 Aug 2008 19:01:39 +0000 |
| Subject: | Re: strip_tags | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-277993@lists.php.net to get a copy of this message | ||
> If you are sanitizing _POST input for a database by escaping (via mysql_*),
> is there a reason to use strip_tags()? If so, why and could you provide an
> example?
Not really, as long as you're using something like
mysql_real_escape_string(). Though if you're redisplaying it to your
users (ie something like a forum) then you might want to use
strip_tags() to get rid of any HTML.
--
Richard Heyes
http://www.phpguru.org