note 56483 deleted from function.strip-tags by aidan

Note Submitter: bob at aol dot com Reason: useless ---- christopher-kunz's example attack is further sterilized by ensuring magic_quotes_gpc is enabled. nonetheless, xss should be taken seriously.. anther great input filter can be found at http://cyberai.com/inputfilter/ taken from the strip_slashes documentation, this simple function can be used to strip_tags in an array: <?php function strip_tags_in_array($value){ $value = is_array($value) ? array_map('strip_tags_in_array', $value) : strip_tags($value); return $value; } ?> Usage: <?php $array = array('<p>This paragraph</p>', '<a href=#" onclick="alert('alert');">Alert</a>'); $array = strip_tags_in_array($array); ?> -Ominous Bob