Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have a sort of system where everybody can type whatever he wants. Though, they can also seem to use tags like <img SRC="..."/> , <a href="..."></a> etc.
How could you exactly prevent this? So as example, if someone types in <h1>Hello</h1> the text won’t get big, but it would just show <h1>Hello</h1>.
If it’s not possible to do this please give me an alternative.
To make the HTML display as written, you need to “escape” the special characters &, < and > using
htmlspecialchars().Alternatively, you could remove all the tags and display the remaining text using
strip_tags()