Eric Gorr wrote:
Any other suggestions?
Well see this example :
function clean_body($body_text) {
if(ini_get('magic_quotes_gpc')) $body_text = stripslashes($body_text); // If magic_quotes are on, strip the extra-added slashes
return htmlentities($body_text); // Return the value
}
This is a good way to start, I think. Filtering the input first would be a nice idea too, especeally if there're more input fields ;-)
-- Josip Dzolonga http://josip.dotgeek.org
jdzolonga[at]gmail.com
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
