note 21975 deleted from function.strip-tags by vrana
| From: | vrana@php.net | Date: | Mon, 22 Dec 2003 16:12:10 +0000 |
| Subject: | note 21975 deleted from function.strip-tags by vrana | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-62325@lists.php.net to get a copy of this message | ||
Note Submitter: tim@e-matters.de
----
your expression can easy be fooled. if somebody writes something like this :
<SCRIPT>
alert("hossa");
</SCRIPT dummy_flag = true>
nothing will be replaced. i think the expression should look this way :
"/<script[^>]*>[^<]+<\/script[^>]*>/is"