Allow Link Tags But Not Javascript or CSS..

[HairyArse]

Hi guys,

I'm working on my own web forum and am having one minor problem.

I'm using the strip_tags function to strip all html tags apart from <b>, <i>, <u> and <a> which works fine - however, allowing for <a href entries also allows the users to insert javascript or CSS into the middle or a hyperlink and I need to prevent this.

I'm sure this has been covered elsewhere but I couldn't find it. So can anyone either point me in the direction of where this has been answered before or give me an alternative solution?

Thanks in advance guys, it's much appreciated.

[Piranha]

And the same can be done with the other tags if I'm not totally wrong. One suggestion is to use BB-tags instead of HTML tags. Then you choose what tags users can use and how they are used, and you can still strip out all HTML (or use htmlspecialchars) to make sure that they don't do any funny buisness.