Advice on html

[Shaped]

Hello All.

Im building a new forum for my site, ive allready done one and has been working fine,

What i want to do is build a new forum, using 1 of the current HTML editors to can freely use. The problem with this is its going to be using pure html, Not BBCode,

My question is whats the security like with allowing HTML posted by a potentiol hacker into the database and then on to the site.

Ive got a function to strip certain malicous attributes from each tag. This will strip out things like
javascript😐onclick|onclick|onmousedown|onmouseup|onmouseover|onmousemove|onmouseout|onkeypress|onkeydown|onkeyup

Ill also make it so only certain safe html tags are allowed to be posted.

Good idea or bad?

Thanks

[NogDog]

One thing that can be problematic is poorly formed HTML. An unclosed DIV or table element or an element attribute without a closing quote can result in invalid HTML, causing the entire page to display incorrectly (possibly even causing portions to not display at all).

[Shaped]

Thanks nogDog, i didnt think of that, and i can remember now why i didnt allow it in the first forum that was the reason.