note 21975 added to function.strip-tags
| From: | tim at e-matters dot de | Date: | Sun, 02 Jun 2002 16:32:44 +0000 |
| Subject: | note 21975 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-31345@lists.php.net to get a copy of this message | ||
your expression can easy be fooled. if somebody writes something like this :
<SCRIPT>
alert("hossa");
</SCRIPT dummy_flag = true>
nothing will be replaced. i think the expression should look this way :
"/<script[^>]*>[^<]+<\/script[^>]*>/is"
--
http://www.php.net/manual/en/function.strip-tags.php
http://master.php.net/manage/user-notes.php?action=edit+21975
http://master.php.net/manage/user-notes.php?action=delete+21975
http://master.php.net/manage/user-notes.php?action=reject+21975