note 49633 deleted from function.strip-tags by danbrown
| From: | danbrown@php.net | Date: | Sun, 17 May 2009 16:04:14 +0000 |
| Subject: | note 49633 deleted from function.strip-tags by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-154752@lists.php.net to get a copy of this message | ||
Note Submitter: kangaroo232002 at yahoo dot co dot uk
----
After wondering why the following was indexed in my trawler despite stripping all text in tags (and
punctuation) "» valign left align middle border 0 src go gif name search1 onclick
search", please take a quick look at what produced it: <DIV style="position: absolute;
TOP:22%; LEFT:68%;"><input type="image" alt="Go >"
valign="left" align="middle" border=0 src="go.gif"
name="search1" onClick="search()"></div>...
looking at this closely, it is possible to see that despite the 'Go >' statement being
enclosed in speech marks (with the right facing chevron), strip_tags() still assumes that it is the
end of the input statement, and treats everything after as text. Not sure if this has been fixed in
later versions; im using v4.3.3...
good hunting.