Originally posted by Jedi Legend
Because $_POST is an array. You can use an array with no problems with str_replace, but apparently not so with strip_tags.
Ahhh yes good call Jedi well i guess i could use string replace with an array list of things and filter out most stuff that way it will be global then instead of coding a function and using it for ever form input which is anoying to me 🙂
// can add what ever is need here
$filter = array("'", "$", "..", "\\\");
$_POST = str_replace($filter, "", $_POST);
The above could be handy for others who knows 🙂
thanks Jedi