filter html not working

[jasondavis]

In my example below I am trying to filter out html tags, it works great as long as the 3 lines I have // before are disabled, as soon as you enable them, it makes the html filtering not work, any help please

<?php
$_POST['subject'] = '<a href="sdfs">damn</a> ok<javascript> <script>';

function FilterALLHTML2($document) {
	$search = array ("'<script[^>]*?>.*?</script>'si",  // Strip out javascript
                 "'<[\/\!]*?[^<>]*?>'si");// strip html
	$text = preg_replace ($search, '', $document);	
//	$text = preg_replace('/f.?u.?c.?k/i', '...', $document); // filter fuck
//	$text = preg_replace('/(s|$).?h.?i.?t/i', '...', $document); // filter shit
//	$text = preg_replace('/(potspace|pot space|shit|asswipe|bitch|asshole|dumbass|asshole|<BIG>)/i', '...', $document); // filter some words
	return $text;
}

$subject = FilterALLHTML2($_POST['subject']);
echo $subject;
?>

[jasondavis]

in the disabled lines I replace $document with $text and that seems to do the trick, I also added those lines into the array, is that faster?

[Weedpacket]

jasondavis wrote:

$text and that seems to do the trick

That's because otherwise you throw away the results of each filter, instead of passing them to the next filter.

You also missed the [man]html_strip_tags[/man] function.

And it's a very poor set of filters. Here are some words that it does not allow:

Auschwitz, downshift, fetishist, fetishistic, gearshift, Lipschitz, makeshift, nightshirt, phosphite, putschist, pyschiatrist, schist, schistosomiasis, schnitzel, shift, shirt...

[bradgrafelman]

firetruck? :p

[laserlight]

Incidentally, by html_strip_tags Weekpacket means html [man]strip_tags/man.

[jasondavis]

So

strip_tags() is better to use in place of

 "'<[\/\!]*?[^<>]*?>'si");// strip html

[laserlight]

Yes.