Re: [PHP4BETA] Re: strip_tags() and the recent CERT advisory....

TG>> My solution can be thinned down depending on your situation, I wrote it to TG>> work for all cases, and makes it easy to separate into a file that can be TG>> easily included in multiple scripts. For example, if you aren't using TG>> cookies to generate any output, you can remove the HTTP_COOKIE_VARS loop TG>> entirely, which reduces CPU load due to that code by 1/3 :-) Well, in fact if you wanted to disable HTML entirely, won't htmlentities() have the same effect and be faster? So you'll still see those tags, but they will be harmless... Or I still miss something important? -- Stanislav Malyshev stas@zend.com +972-3-6139665