I was just curious whether there was a way to disable html but still allow the use of <br> and <p>.
My situation right now is that I allow the users to update their profile. All their information is stored in a mysql database and I wanted to provide formatting for their profile so it's not just one big ugly blob of text for their bio. At first I was just using htmlspecialchars() but that disabled all html, and I at least want them to have the ability to put in breaks and paragraphs so when it's displayed, it's not as ugly.