forbidding HTML in forms

rupertbj

Please can someone let me know how to forbid the use of HTML when submitting forms. Also, could javascript be processed from within a form and how could that be forbidden?

Thanks in advance!

Rupert

jpmoriarty

not sure aboupt forbidding it - but if you run the form text through the htmlspecialchars() function then you'll encode all the html charachters into harmless ones (ie & will become &amp, " becomes &quot etc).

If your text is in the variable $text, then just do $text=htmlspecialchars($text);

matbennett

Rupert,

I think that what you want is the strip_tags function. (
manual entry ).

in short, if you have $myFormField you can use

$myFormField = strip_tags($myFormField );

To remove all tags from it. You can also specify allowable tags if you want by using:

$myFormField = strip_tags($myFormField , '<a><b><i><u>');

which would allow links, bold, itallic and underline (for example).

Hope that this is of some help.