note 21249 added to function.strip-tags

strip_tags() doesn't remove lone opening comment tags (like so: <!-- ) if you are getting user input (via a form, or what), someone can put in a "<!--" (without the closing tag) and the rest of the html on that page will not show. to catch these: $stuff = strip_tags($stuff); $stuff = str_replace('<!--', '', $stuff); -- http://www.php.net/manual/en/function.strip-tags.php http://master.php.net/manage/user-notes.php?action=edit+21249 http://master.php.net/manage/user-notes.php?action=delete+21249 http://master.php.net/manage/user-notes.php?action=reject+21249