[RESOLVED] Disbaling PHP and Javascript for users

[SpecialFX]

I have a site where bands have accounts and can post a biography and such, So how could I make it so that it disables any javascript and php they try to put in there, because that could make a big mess out of things. Like it checks for javascipt and php then if there isn't any it puts into the database.

[awesome_aims]

You could search the string for any php or JS tags, for example:

// if it finds one of the sub strings it returns true, strstr() is one of the many functions you can use
if(strstr($string, "<?") || strstr($string, "<script")) {
  echo "You cannot use JavaScript or PHP!!";
} else {
// MySQL here for entering info into DB
}

hope this helps

[SpecialFX]

awesome thank you very much.