[Resolved] strip php

trube

anybody know how to strip php code/tags? My problem is that I want to allow user input of a template in a textarea input box. But I only want to allow html and javascript but not php.

I could use something like:

$str = strip_tags($str, '<a><b><i><u><table><tr><td><ul><li>');

but I'm probably going to miss some html tags.

stolzyboy

the second argument you have there will allow those ones to be used, do you want something to allow them say only bold or italic, or do you want any html allowable

superwormy

use some fancy string matching... find the first <? ( www.php.net/stristr ) and then read until the next ?> and replace all that garbage that you read from the original string ( www.php.net/str_replace ) and keep doing that until theres no more <? tags ( while loop )

trube

Thanks for your reply. I want to allow any and all html and javascript, just no php.

stolzyboy

yeah then you may want to think about superwormy's str_replace, simply

$textarea = str_replace("<?", "", $textarea);
$textarea = str_replace("?>", "", $textarea);

or something in that nature, good luck, or i guess you could take a look at regex at php.net

trube

I found out how:

function strip_php_tags($str) {
	return preg_replace("%<\\?.*\\?>%Usi", "", $str);
}