Re: html in my form? bad things! help help help!
| From: | zerosumzero@yahoo.com | Date: | Mon, 16 Jul 1979 05:46:19 +0000 |
| Subject: | Re: html in my form? bad things! help help help! | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-58011@lists.php.net to get a copy of this message | ||
on 7/16/01 1:47 AM, Ray Dow at ray@massive.com.au wrote:
> Try a different format that is also easier for the users to type. For
> example;
> <a http://somesite.com>Click me!</a> and then
> convert that string
> OR
> [link:http://somesite.com]Click me![link]
>
> NEVER let users type HTML straight into a form box, its way too easy to
> screw up your entire site.
>
> (Just for starters i could use <iframe> to embed anything into the page,
> document.location is another great example of why you should use a different
> system)
>
iframe removed by strip_tags(); isn't it?
--
susan@futurebird.com
http://futurebird.diaryland.com