Question

i used htmlspecialchars to clean site comments, it’s change <> to html special character. but i also need to put some links in comments, same like as here at SO.
i think some thing like perg_replace can make a exception for htmlspecialchars, for example to hide [LINK]<a href="...">...</a>[/LINK] from htmlspecialchars. how i can make it in php? or what’s a better way to do that?

Answer 1

you can use this code:

$comment = preg_replace('/'.preg_quote('[link]','/').'(.*?)'.preg_quote('[/link]','/').'/eisU',"htmlspecialchars_decode('$1')", $comment);