Question

I have problem with PHP and JavaScript/CSS.

I have database with table. The table has a descriptions of articles. I want to echo the descriptions of the articles from database. Unfortunately many of them has a JavaScript or CSS included ( Then some article text), so when I use echo, it shows all of that code (and after that text). Is there any way to not show the JavaScript/CSS part and show only the text? For example with str_replace and regular expression? If yes, can somebody write me how it should look like?

Thanks for help and let me know if u need more info (code etc.)

Answer 1

You can try the following regex to remove the script and css:

"<script[\d\D]*?>[\d\D]*?</script>"
"<style[\d\D]*?>[\d\D]*?</style>"

It should help, but it cannot remove all the scripts. Like onclick=”javascript:alert(1)”.