note 24495 added to function.strip-tags
| From: | eregi at enevo dot com | Date: | Mon, 19 Aug 2002 16:04:46 +0000 |
| Subject: | note 24495 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-35197@lists.php.net to get a copy of this message | ||
Keep in mind that there's a bug in IE 6 that let's people insert JS into <IMG> SRC
tag.
<img src="javascript:alert('Hello world')" />
Something like that.
Don't allow <img>!!!
--
http://www.php.net/manual/en/function.strip-tags.php
http://master.php.net/manage/user-notes.php?action=edit+24495
http://master.php.net/manage/user-notes.php?action=delete+24495
http://master.php.net/manage/user-notes.php?action=reject+24495