Disable HTML in Forms

[Fugler]

Hi. I was just wondering. When you're making your own thing like a guestbook or something like that, how do you going about allowing or disallowing HTML in the forms in order to prevent bad input?

Any help is much appreciated.

[filburt1]

Hi. I was just wondering. When you're making your own thing like a guestbook or something like that, how do you going about allowing or disallowing HTML in the forms in order to prevent bad input?

Any help is much appreciated.

$converted = htmlspecialchars($original);

If your page is powered by vB, use htmlspecialchars_uni() which specifically supports Unicode.

[Fugler]

Thanks, so how would I use that, Do I just put it somewhere on the page?

Also, would it work in a non vB powered page?

[NTLDR]

htmlspecialchars() is a standard PHP function and will work on any PHP page. htmlspecialchars_uni() will only work on pages powered by vBulletin.

Run htmlspecialchars() on the variable that contains the input from the form, for example:


$text_without_html = htmlspecialchars($_POST['message']);

[Fugler]

Ahh, I think I see now, Thanks for all your help the pair of you :D