Rich format text help in php

Question

rajeesh_rsn 0 Posting Whiz in Training

13 Years Ago

Hi friends,

In my php form I just blocked the sql injection by adding below into my processing page $comment=mysql_real_escape_string($_POST['comment']); But I need to add "Richtext format in My Form ( Ie BOLD, ITALICS and UNDERLINE ).

Now I just want to enable only these in my processing page ( Only ,,,,,).

Please advise me how to do this..
Thanks in advance
Rajeesh

php

3 Contributors
3 Replies
85 Views
7 Hours Discussion Span
Latest Post 13 Years Ago Latest Post by itslucky

paulrajj 6 Junior Poster

13 Years Ago

mysql_real_escape_string escapes only following characters to prevent sql injection,
\x00, \n, \r, \, ', " and \x1a.

You can use strip_tags to add particular tags to your processing comment.

strip_tags($_POST['comment'], '<u></u><i></i><b></b>'); // Allow <u></u><i></i><b></b>

strip_tags

Edited 13 Years Ago by paulrajj because: n/a

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

rajeesh_rsn 0 Posting Whiz in Training · Answer 1 · 2011-02-04T00:21:29+00:00

Thank you for your kind reply ......

I will go through it
Once again thanks

mysql_real_escape_string escapes only following characters to prevent sql injection,
\x00, \n, \r, \, ', " and \x1a.
You can use strip_tags to add particular tags to your processing comment.
strip_tags($_POST['comment'], ''); // Allow 
strip_tags

itslucky 0 Junior Poster in Training · Answer 2 · 2011-02-04T01:06:01+00:00

itslucky 0 Junior Poster in Training

13 Years Ago

Thank you for the POST...!!!