Parse <Script> Tag in user -entered data

[skinny_monkey]

I'm not too sure if this problem lies with php or mysql - i think it might be mysql...

I have a field in my table, called userDescription, which can contain a lot of characters, so the user can write comments and post information.

If the user includes <script> tags in this field, when this data is retrived with php, it displays an error message - not a php error message, but a box pops up saying:

"Unexpected ( - Do you want to debug? Yes/No" - clicking on yes opens up the page in the microsoft debug environment.

This error message doesn't appear when the <script> tag is removed from the user description, but i would like it to so that the <script> tag is displayed as well eg for forums such as this where you can use the tag.

Is there anyway i can do this?

[bogu]

When you echo your data try using:

echo  htmlspecialchars($row['userDescription']);

. See more about this function in your help file.

[skinny_monkey]

thanks for your help, thats worked a treat

😃

[bogu]

Your wellcome.