[PHP] RE: html in my form? bad things! help help help! From: Ray Dow (ray <email protected>)
Date: 07/16/01

Everything removed by strip_tags(), including <a href="somelink>click me</a>
(you original example)

See the problem?

> -----Original Message-----
> From: zerosumzero <email protected> [mailto:zerosumzero <email protected>]
> Sent: Monday, 16 July 1979 3:46 PM
> To: Ray Dow; php-general <email protected>
> Subject: Re: html in my form? bad things! help help help!
>
>
> on 7/16/01 1:47 AM, Ray Dow at ray <email protected> wrote:
>
> > Try a different format that is also easier for the users to
> type. For
> > example; <a http://somesite.com>Click me!</a> and then convert that
> > string OR
> > [link:http://somesite.com]Click me![link]
> >
> > NEVER let users type HTML straight into a form box, its way
> too easy
> > to screw up your entire site.
> >
> > (Just for starters i could use <iframe> to embed anything into the
> > page, document.location is another great example of why you
> should use
> > a different
> > system)
> >
>
>
> iframe removed by strip_tags(); isn't it?
>
>
> --
> susan <email protected>
> http://futurebird.diaryland.com
>
> 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe <email protected>
For additional commands, e-mail: php-general-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>