I asked this question awhile ago and never really visited the issue till now. The response I got showed me how to disable everything, but I want to allow basic html tags. ~My original question~ My next task is disable harmful tags/scripts in a full text field. I want to store a bio type field and I am considering allowing html (to allow a MySpace type of customization to the page), but I am really new to this so I really don't know what kind of trouble I am asking for. I'm sure that I need to block JavaScript, but are there other things (tags, scripting, etc.) that can be input into my DB that will cause problems either being stored as such or when accessed? I'm thinking along the lines outlined below, I just need to complete the list and would like some assistance form the seasoned vets here. $bio = strtr($bio, "<script>, ""); $bio = strtr($bio, "<?php>, ""); $bio = strtr($bio, "<?>, ""); Again, thanks for the advice in advance. Don -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
