note 34235 added to function.strip-tags
| From: | e at eikimartinson dot c0m | Date: | Sat, 19 Jul 2003 06:18:12 +0000 |
| Subject: | note 34235 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-52374@lists.php.net to get a copy of this message | ||
"Warning: This function does not modify any attributes ..."
If only it were true! I am using strip_tags and allowing the <a> tag under sessions so that
secured users can enter links into a text box. While strip_tags does allow the a tag, it adds the
session identifier to the href parameter.
Input of '<a href="p.html">' yields '<a
href=p.html?PHPSESSID=foo">'.
Is there any way to correct this behavior?
----
Manual Page -- http://www.php.net/manual/en/function.strip-tags.php
Edit Note -- http://master.php.net/manage/user-notes.php?action=edit+34235
Delete Note -- http://master.php.net/manage/user-notes.php?action=delete+34235&report=yes
Reject Note -- http://master.php.net/manage/user-notes.php?action=reject+34235&report=yes