Quote:
Originally Posted by Milad
westpointer, did you use $vbulletin->clean-> gpc for this item?
|
No, but I reckon I should. I'm using:
PHP Code:
$_POST['message'] = strip_tags($_POST['message']);
$_POST['message'] = convert_url_to_bbcode($_POST['message']);
and then using
PHP Code:
$db->sql_prepare($_POST['message'])
when doing an insert or update. Does clean do more?