note 11938 deleted from function.strip-tags by jimw
| From: | jimw@php.net | Date: | Mon, 29 Oct 2001 01:34:02 +0000 |
| Subject: | note 11938 deleted from function.strip-tags by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-19544@lists.php.net to get a copy of this message | ||
It's a good idea to write a function of your own if you're planning to allow some
html-tags. It seems like strip_tags() doesn't care about arguments in the tags. Ex. if you want
to allow <b> and you use:
strip_tags($str, "<b>");
Someone can write something like this:
<b onmouseover="for(i=0;i<50;i++)window.open('www.porn.com');">Long
message...</b>