note 46109 added to function.strip-tags
| From: | SecureGuy at osu1 dot php dot net | Date: | Wed, 29 Sep 2004 19:16:34 +0000 |
| Subject: | note 46109 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-77579@lists.php.net to get a copy of this message | ||
I have a problem with tREXX's solution above...what if someone does this:
<a href="javjavascriptascript: alert('!!!')"
onmonmouseoverouseover="alert('Blah!')">
After passing through that function, it would look like this:
<a href="javascript: alert('!!!')"
onmouseover="alert('Blah!')">
Therefore, his function needs some revising...just letting people know.
----
Manual Page -- http://www.php.net/manual/en/function.strip-tags.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+46109
Delete -- http://master.php.net/manage/user-notes.php?action=delete+46109&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+46109&report=yes
Search -- http://master.php.net/manage/user-notes.php