Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have a comment form on my website which, at the moment I filter out all html and turn it into plain text and also replace bad words with funny words. I want to be able to allow users to post images. I couldn’t see how to incorporate this to the comment page so have set it up on a separate page just dedicated to users posting images. But, I still don’t want to allow any other html except img. Also, protect from sql injection.
Does anyone have any ideas?
Thanks.
Two decent methods would be using Tidy or HTMLPurifier. Both filter HTML very well and are highly customizable to suit your needs.
With purifier (I speak from experience as I have used it) it will allow you to add something like:
To the allowed tags property, which allows only those attributes in the
imgtag. See the website for more information / usages.