Form

[Anon]

OK I have a form, the client send data in the database, and after he can read the content of the database.. BUT if he write in his message "<B>", or any HTML tag, the tag will be generated when displayed... but I don't want this ! I want the text "integral"... 😉 Somebody told me to use a fonction ereg_replace(); butif I use the replace function I will have to replace EVERY html tag that exist and that would be really bad. Since my output is in a string there must be a way to avoid parsing html?

[Anon]

try this :

$html = "<a href=\"bla.php\">";
print htmlspecialchars($html) ;

the output will be :
<a href=bla.php>

[Anon]

Thanks a lot, it works fine !