note 45219 added to function.stripslashes

daevid: That's not enough. That way somebody could use " style="font-size: 120pt;" "foo as his name to inject HTML attributes into your web pages which is a bad idea for forums and so on. I'd suggest being very careful with user input and thinking about whether it can contain insecure meta characters before interpolating it into a template. ---- Manual Page -- http://www.php.net/manual/en/function.stripslashes.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+45219 Delete -- http://master.php.net/manage/user-notes.php?action=delete+45219&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+45219&report=yes Search -- http://master.php.net/manage/user-notes.php