strip_tags() hijinks

[ppg3412]

I'm running a strip_tags() through a guestbook posting script.
Seems to work okay, until someone puts a left-angled bracket into their post, then the bracket plus everything after it is stripped.

Ex:

I'm experiencing a problem with your site >.<, can you help me?

after strip_tags():

I'm experiencing a problem with your site >.

Are there any workarounds? 😕

[HalfaBee]

use htmlspecialchars() instead of striptags(). Then they can post anything without causing problems.

HalfaBee

[ppg3412]

I'll try this.

Though I was also looking for a solution that would remove HTML/PHP tags from the message, but keep the offending "<".

Thanks alot though. 😃

[laserlight]

Well, they did say strip_tags() errs in case of bogus tags 😛

I think that htmlspecialchars() is the easiest, after all, some ppl might use bogus tags the same way people use asterisks.

You could try something like:

$text = preg_replace("/<[^<]*>/", "", $text);

EDIT:
I'm still quite poor at regex, but maybe my modification is better

[catgurl_ashley]

eregi_replace is the way i would go

sumthin like this

$pattern = "The pattern";
$replace = "";
$string = eregi_replace($pattern, $replace, $string);

altho to make this work youll need to know all the stuff that goes along with finding the patterns....you probly do :p

[ppg3412]

Hey,

I eventually went along with the htmlspecialchars().
I'll continue experimenting with both eregi + preg to see if I can use it elsewhere in my script.

Thanks anyway all. 🙂