[PHP] Re: html in my form? bad things! help help help! From: zerosumzero <email protected>
Date: 07/16/79

on 7/16/01 1:47 AM, Ray Dow at ray <email protected> wrote:

> Try a different format that is also easier for the users to type. For
> example;
> <a http://somesite.com>Click me!</a> and then convert that string
> OR
> [link:http://somesite.com]Click me![link]
>
> NEVER let users type HTML straight into a form box, its way too easy to
> screw up your entire site.
>
> (Just for starters i could use <iframe> to embed anything into the page,
> document.location is another great example of why you should use a different
> system)
>

iframe removed by strip_tags(); isn't it? 

-- 
susan <email protected>
http://futurebird.diaryland.com

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe <email protected>
For additional commands, e-mail: php-general-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>