[Gio~Logist]

PHP Code:

   $webpage['text'] = preg_replace("/(\<script)(.*?)(script>)/si", "", $webpage['text']); 
                //Don't hide anything! 
                $webpage['text'] = str_replace("<!--", "&lt;!--", $webpage['text']); 


i believe that alone filters out malicious codes



this code is the one that does pretty much everythign

PHP Code:

            //Check text-formatting settings 
            $settingvbcode = iif($row['vbcodeorhtml'] == 'vbcode' AND $vboptions['webpageallowvbcode'] == '1', '1', '0'); 
            $settinghtml = iif($row['vbcodeorhtml'] == 'html' AND $vboptions['webpageallowhtml'] == '1', '1', '0'); 
            if($settinghtml == 0 AND $settingvbcode == 0) { 
                $settingvbcode = 1; 
            } 
             
            if($vboptions['webpagesmilies'] == 1 and $row['usesmilies'] == 1) { 
                $settingsmilies = 1; } else { $settingsmilies = 0; } 
             
            if($settingvbcode == 1) { 
                $webpage['text'] = parse_bbcode2($webpage['text'], $settinghtml, 1, $settingsmilies, $settingvbcode); 
            } 
            if($settinghtml == 1) { 
                //Remove scripts!!! 
                $webpage['text'] = preg_replace("/(\<script)(.*?)(script>)/si", "", $webpage['text']); 
                //Don't hide anything! 
                $webpage['text'] = str_replace("<!--", "&lt;!--", $webpage['text']); 
                //Allow specified tags (if empty in admin, ALL tags are allowed! SECURITY RISK!) 
                if($settinghtml == 1 && !empty($vboptions['allowedhtmltags'])) { 
                    $webpage['text'] = strip_tags($webpage['text'], $vboptions['allowedhtmltags']); 
                } 
            }