note 47413 added to function.strip-tags
| From: | dj.kogz | Date: | Mon, 15 Nov 2004 22:54:53 +0000 |
| Subject: | note 47413 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-80561@lists.php.net to get a copy of this message | ||
This is what I use to make my things safe from that kind of exploit...
$html = "<ta<tableble>";
$html = strip_tags($html);
$html = str_replace("<", "<", $html);
$html = str_replace(">", ">", $html);
cheers. :)
----
Manual Page -- http://www.php.net/manual/en/function.strip-tags.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+47413
Delete -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+47413&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+47413&report=yes
Search -- http://master.php.net/manage/user-notes.php