RE: html in my form? bad things! help help help!
| From: | Ray Dow | Date: | Mon, 16 Jul 2001 06:03:52 +0000 |
| Subject: | RE: html in my form? bad things! help help help! | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-58014@lists.php.net to get a copy of this message | ||
Everything removed by strip_tags(), including <a href="somelink>click me</a>
(you original example)
See the problem?
> -----Original Message-----
> From: zerosumzero@yahoo.com [mailto:zerosumzero@yahoo.com]
> Sent: Monday, 16 July 1979 3:46 PM
> To: Ray Dow; php-general@lists.php.net
> Subject: Re: html in my form? bad things! help help help!
>
>
> on 7/16/01 1:47 AM, Ray Dow at ray@massive.com.au wrote:
>
> > Try a different format that is also easier for the users to
> type. For
> > example; <a http://somesite.com>Click me!</a>
> > and then convert that
> > string OR
> > [link:http://somesite.com]Click me![link]
> >
> > NEVER let users type HTML straight into a form box, its way
> too easy
> > to screw up your entire site.
> >
> > (Just for starters i could use <iframe> to embed anything into the
> > page, document.location is another great example of why you
> should use
> > a different
> > system)
> >
>
>
> iframe removed by strip_tags(); isn't it?
>
>
> --
> susan@futurebird.com
> http://futurebird.diaryland.com
>
>