note 83042 added to function.strip-tags

Danno, your script has a flaw. Try this : <?php function strip_tags_keep_links($sSource) { return preg_replace('/<(.*?)>/ie', "'<' . preg_replace(array('/javascript:[^\"\']*/i', '/\b((?![hH][rR][eE][fF]\b)\w+)[ \\t\\n]*=[ \\t\\n]*[\"\'][^\"\']*[\"\']/i', '/\s+/'), array('', '', ' '), stripslashes('\\1')) . '>'", strip_tags($sSource,'<a>')); } $source = "<a href=javascript:alert('doesn\'t&nbsp;work!') title=\"move your mouse here\" href=http://www.a_web_site.org onmouseover\n=\nalert(\"doesn\'t&nbsp;work!\") onmouseover='alert(\"doesn\'t&nbsp;work!\")' alt=\"move your mouse here\" > test</a>"; $result=strip_tags_keep_links($source); echo($result); ?> ---- Server IP: 217.174.223.124 Probable Submitter: 83.186.40.100 ---- Manual Page -- http://www.php.net/manual/en/function.strip-tags.php Edit -- https://master.php.net/note/edit/83042 Del: integrated -- https://master.php.net/note/delete/83042/integrated Del: useless -- https://master.php.net/note/delete/83042/useless Del: bad code -- https://master.php.net/note/delete/83042/bad+code Del: spam -- https://master.php.net/note/delete/83042/spam Del: non-english -- https://master.php.net/note/delete/83042/non-english Del: in docs -- https://master.php.net/note/delete/83042/in+docs Del: other reasons-- https://master.php.net/note/delete/83042 Reject -- https://master.php.net/note/reject/83042 Search -- https://master.php.net/manage/user-notes.php