[Resolved] html and php code in text -> how to store in database

[Hotkey]

Hi all !

I am currently working on some sort of forum.
The submitted text should be stored in a mysql database.

For now everything works fine, but im not sure which manipulation i should do with the submitted string before i store it into the databse - and what to do with the text after i readed it from the datase.

The user should not be able to use html code, but he should be able to write html/php code.

In addition it would be cool if strings like www.myurl.com are automatically changed to a "real" link ...

I don't know if all this is possible, but thanks in advance for your help ...

Greets

Hotkey

[superwormy]

Well... its obviously posssible becaue this forum does it. :-)

I don't exactly see hte problem, just store whatever data they enter in the database as text... thats all there is to it.

And for changing the URLs...
www.php.net/eregi_replace
www.php.net/preg_match
www.php.net/stristr
www.php.net/substr
www.php.net/strpos

Soooo many options :-)

[Hotkey]

no, if would store it as a text, the user would be able to use html (so that it gets interpreted by the browser), thats not what i want.
Then theres a problem with chars like " or ' < > etc.

Or what i am doing wrong ?

[superwormy]

Well, you need to store it as text one way or another, HTML and PHP and text is simply that... TEXT.

What you're really looking for is some sort of input validation, and perhaps some functions like:

www.php.net/htmlspecialchars
www.php.net/htmlentities
www.php.net/addslashes
www.php.net/strip_tags

[Hotkey]

thats exactly what i meant! Thank your very much for the links ..

-> resolved