note 22339 deleted from function.htmlspecialchars by didou
| From: | didou@php.net | Date: | Tue, 29 Jul 2003 19:17:25 +0000 |
| Subject: | note 22339 deleted from function.htmlspecialchars by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-52959@lists.php.net to get a copy of this message | ||
Note Submitter: advocat@ukrpost.net
----
in russian: ëó÷øå èñïîëüçîâàòü ñïåöèàëüíûé êîä, è íå
ïîçâîëÿòü ïîëüçîâàòåëÿì èñïîëüçîâàòü îáû÷íûé html, ýòî
êàê ìèíèìóì ïðåäîòâðàòèò ïîÿâëåíèå <script... è òä...
ex.:
function flt_tags($text) {
$text = ereg_replace("r", "", $text);
$text = ereg_replace("n", "[br]", $text);
$text = str_replace("<", "<", $text);
$text = str_replace(">", ">", $text);
$text = str_replace("[br", "<br", $text);
$text = str_replace("[p", "<p", $text);
$text = str_replace("[b", "<b", $text);
$text = str_replace("[/b", "</b", $text);
$text = str_replace("[i", "<i", $text);
$text = str_replace("[/i", "</i", $text);
$text = str_replace("[/u", "<u", $text);
$text = str_replace("[/u", "</u", $text);
$text = str_replace("[font color=", "<font color=", $text);
$text = str_replace("[font size=", "<font size=", $text);
$text = str_replace("[/font", "</font", $text);
$text = str_replace("[url=","<a target=_blank href=",$text);
$text = str_replace("[/url","</a",$text);
$text = str_replace("]",">",$text);
$text = stripslashes($text);
$text = trim($text);
return $text;
}