ereg_replace question

[VenusJ]

hello,
i am working on a scirpt that will allow user to input data to the database, and i have something like that to make sure that the user can't input the following:

<

%

^

and here is the code:

$myinfo = ereg_replace("<|--|%|^|=|~|>", "", $myinfo);

everything seems ok except for ^, it's still echoing out
can somebody tell me why it is doing that?
and is my code right?

thank you!

[dalecosp]

the ^ (caret) is reserved. Try escaping it....

[dalecosp]

probably the --, also (at least one). Better test thoroughly....... 😉

[VenusJ]

Originally posted by dalecosp
the ^ (caret) is reserved. Try escaping it....

thank you
but what do you mean by escaping it?

Also, can you explain to me in simple english the following code?
I found it from php.net

$text = ereg_replace ("<a[^>]+href *= *([^ ]+)[^>]*>", "<a href=\\1>", $text); 

I know it's replacing

<a[^>]+href = ([^ ]+)[^>]*>

to

<a href=\1>

but why [^>]?

I am confused :rolleyes:

thank you for your help