Google for BBCode. It's just str_replace(array('[b]','[/b]'),array('<b>','</b>'),$text) in the end. And it's not really going to be any better than just letting them type <b> and </b> if that is needed. Your sanitization process will be the same no matter what, and will have the same flaws/risks either way. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php