Stripping HTML style= and mouseover=, et

[fordiman]

I need the correct syntax for eregi_replace() to remove any style and javascript-calling attributes from a string.

[Anon]

Not real familiar with the function, but do this all the time. Have you tried the regex:

<[^ ]+[^>]*>

That should work pretty well. It'll kill all your images and links, which you could probably fix with:

<[^IA ]+[^>]*>

[fordiman]

Thats not what I'm really trying to do.

What I want is something that'll take a string like:
&lt;img src="picurl" onmouseover="javascript(@!#$);"&gt;
into:
&lt;img src="picurl"&gt;

[fordiman]

nm, what you gave me was enought to figure it out.

[fordiman]

this was the final product, in case someone else needs it...

$string = eregi_replace( "(onmouseover|onmouseout|onkey|onload|onclose)=['"][^>]*['"]", "", $string );