note 81629 deleted from function.strip-tags by ezyang

Note Submitter: bohwaz+php at bohwaz dot net Reason: bad code ---- Here's a 2 line regexp which will delete tags you haven't allowed : <?php // Allowed tags (regex) $tags = 'b|i|em|strong|li|ul|ol|p|a|img|span|br|h[1-6]|pre|code'; $str = preg_replace('§<+?((?!/?('.$tags.')(\s+.*|\s*)/?>).*)>+?§sU', '', $str); ?> All non-allowed tags are deleted. You can try with <script>, <<script>>, < script >, <a href="<script>">, etc etc. Note that it transforms things like <a href="<script>alert(5);</script>"> in <a href="alert(5);">.