strip_tags()

[Daggeth]

Can I code it so the script takes all variables (not just posted, but also the ones being passed through URLs), and use the strip_tags function on them because I dont want to code hudreds of lines for each variable..

[jpmoriarty]

<?
while($element = each($_GET))
{
	$element['value'] = strip_tags($element['value']);
	echo $element['key'];
	echo ": ";
	echo $element['value'];
	echo "<br>\n";
}
?>

any good?

[Daggeth]

Thats perfect! Thanks and I assume for form variables I would use:

while($element = each($_POST))

?

And another question, how would I put the value back in its original name..

like once it has stripped the tags off variable1 and variable2, i want the info back in the appropriate variables instead of the array.. would I have to use the evaulate funtion to turn the array location into a varibable and make it equal to the array value?

[jpmoriarty]

i'm not sure i get you. if you mean that your global variables are on in php.ini and that you're used to having normal variables in (ie $variable as opposed to $POST['variable']) then i would say that the general concensus here is that you really should be using the $POST and $_GET versions - it's safer or something.

I think this does what you want it to do: (i've edited it cos i just found a quicker way of doing it...)

<?
foreach($_GET as $key => $value)
{
	$key = strip_tags($value);
	echo $key;
}
?>

and yes you just use $_POST for the post vars.