How to remove HTML and Scripts in user-written messages?

Asked

Viewed 58 times

1

I created a messenger, and after the user writes the message it is saved in the database in format sweep, when the recipient sees the message, if it has been written with tags HTML, and tags of Script this is displayed to the recipient. How to make this not happen?

php html mysql formatting
  • 1

    you want to ban tags or want them to be sent in text form?

  • I did not think about this alternative, but it is valid as well. Either of the two will do, as long as it no longer works.

  • 1

    Then the Milestone answer solves, replace < with &lt; and > with &gt; .

1 answer

4


In a simple way you replace in all < por &lt; e > por &gt; before saving in the bank

if php can use 

htmlspecialchars('<strong>qualquercoisa</strong>')

Browser other questions tagged php html mysql formatting

You are not signed in. Login or sign up in order to post.